Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230711 4.3 警告 ticklespace - Drupal 用の Answers モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6413 2012-12-20 19:10 2008-09-18 Show GitHub Exploit DB Packet Storm
230712 4.3 警告 sadi samami - Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6267 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
230713 6.8 警告 xt:Commerce - xt:Commerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6304 2012-12-20 19:10 2008-11-20 Show GitHub Exploit DB Packet Storm
230714 7.5 危険 TYPO3 Association - TYPO3 用の TU-Clausthal Staff エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6344 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230715 4.3 警告 TYPO3 Association - TYPO3 用の TU-Clausthal ODIN エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6343 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230716 4.3 警告 TYPO3 Association - TYPO3 用の SB Universal Plugin エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6341 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230717 7.5 危険 weber-ebusiness - TYPO3 用の WEBERkommunal Facilities エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6338 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230718 4.3 警告 rightscripts - Text Lines Rearrange Script の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6336 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230719 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6332 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
230720 6 警告 streber-pm - Streber におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6331 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196221 7.5 HIGH
Network 		fil-ocl_project fil-ocl An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free. CWE-415
 Double Free 		CVE-2021-25908 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196222 9.8 CRITICAL
Network 		containers_project containers An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed. CWE-415
 Double Free 		CVE-2021-25907 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196223 7.5 HIGH
Network 		basic_dsp_matrix_project basic_dsp_matrix An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed. NVD-CWE-noinfo
CVE-2021-25906 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196224 9.1 CRITICAL
Network 		bra_project bra An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory. CWE-908
 Use of Uninitialized Resource 		CVE-2021-25905 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196225 7.5 HIGH
Network 		av-data_project av-data An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault. CWE-476
 NULL Pointer Dereference 		CVE-2021-25904 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196226 7.5 HIGH
Network 		cache_project cache An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced. CWE-476
 NULL Pointer Dereference 		CVE-2021-25903 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196227 7.5 HIGH
Network 		glsl-layout_project glsl-layout An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop. NVD-CWE-noinfo
CVE-2021-25902 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196228 5.3 MEDIUM
Network 		lazy-init_project lazy-init An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race. NVD-CWE-noinfo
CWE-125
Out-of-bounds Read 		CVE-2021-25901 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196229 9.8 CRITICAL
Network 		servo smallvec An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many. CWE-787
 Out-of-bounds Write 		CVE-2021-25900 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm
196230 7.5 HIGH
Network 		dgtl huemagic node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file. CWE-22
Path Traversal 		CVE-2021-25864 2024-11-21 14:55 2021-01-27 Show GitHub Exploit DB Packet Storm