Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230631 6.8 警告 quantum game library - Quantum Game Library における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1069 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230632 6.8 警告 portail web php - Portail Web Php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1068 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230633 6.8 警告 phpqladmin - phpQLAdmin における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1067 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230634 7.5 危険 Smarty - S9Y などの製品で使用される Smarty における任意の PHP 関数を呼び出される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1066 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230635 4.3 警告 WordPress.org - WordPress 用の Sniplets プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1061 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230636 7.5 危険 WordPress.org - WordPress 用の Sniplets プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1060 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230637 7.5 危険 WordPress.org - WordPress 用の Sniplets プラグインにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1059 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230638 6.9 警告 symark - Symark PowerBroker におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1056 2012-12-20 18:34 2008-02-28 Show GitHub Exploit DB Packet Storm
230639 7.5 危険 PHPNUKE - PHP-Nuke 用の Kose_Yazilari モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1053 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
230640 6.8 警告 phpprofiles - phpProfiles の include/body_comm.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1051 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196761 6.1 MEDIUM
Network 		aterm wg2600hs_firmware Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20710 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196762 7.2 HIGH
Network 		nec aterm_wf1200cr_firmware
aterm_wg1200cr_firmware
aterm_wg2600hs_firmware 		Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and … CWE-354
 Improper Validation of Integrity Check Value 		CVE-2021-20709 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196763 7.2 HIGH
Network 		nec aterm_wf1200cr_firmware
aterm_wg1200cr_firmware
aterm_wg2600hs_firmware 		NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execu… CWE-78
OS Command  		CVE-2021-20708 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196764 9.8 CRITICAL
Network 		dlink dap-1880ac_firmware Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via … CWE-306
Missing Authentication for Critical Function 		CVE-2021-20697 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196765 8.8 HIGH
Network 		dlink dap-1880ac_firmware DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program. CWE-78
OS Command  		CVE-2021-20696 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196766 8.8 HIGH
Network 		dlink dap-1880ac_firmware Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vecto… CWE-295
Improper Certificate Validation  		CVE-2021-20695 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196767 8.8 HIGH
Network 		dlink dap-1880ac_firmware Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified… NVD-CWE-Other
CVE-2021-20694 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196768 7.5 HIGH
Network 		gurunavi gurunavi Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via… CWE-862
 Missing Authorization 		CVE-2021-20693 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
196769 7.5 HIGH
Network 		fibaro home_center_2_firmware
home_center_lite_firmware 		In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-20992 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm
196770 8.8 HIGH
Network 		fibaro home_center_2_firmware
home_center_lite_firmware 		In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability. CWE-77
Command Injection 		CVE-2021-20991 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm