Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 6, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230721 | 4.3 | 警告 | xigla | - | Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2766 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230722 | 7.5 | 危険 | xigla | - | Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2765 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230723 | 3.5 | 注意 | xigla | - | Xigla Absolute Live Support XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2764 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230724 | 6.5 | 警告 | xigla | - | Xigla Absolute Live Support XE の search.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2763 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230725 | 6.5 | 警告 | xigla | - | Xigla Absolute Form Processor XE の search.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2762 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230726 | 3.5 | 注意 | xigla | - | Xigla Absolute Banner Manager XE におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2761 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230727 | 6.5 | 警告 | xigla | - | Xigla Absolute Banner Manager XE の searchbanners.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2760 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230728 | 4.3 | 警告 | xigla | - | Xigla Absolute Form Processor XE におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2759 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230729 | 3.5 | 注意 | xigla | - | Xigla Absolute News Manager XE におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2758 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
| 230730 | 6.5 | 警告 | xigla | - | Xigla Absolute News Manager XE の search.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2757 | 2012-12-20 18:52 | 2008-06-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 6, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196581 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology (QAT) compre… |
NVD-CWE-noinfo
|
CVE-2021-23044 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196582 | 4.9 |
MEDIUM
Network |
f5 |
big-ip_access_policy_manager big-ip_guided_configuration |
On all versions of Guided Configuration before 8.0.0, when a configuration that contains secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged… |
CWE-532
Inclusion of Sensitive Information in Log Files |
CVE-2021-23046 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196583 | 8.8 |
HIGH
Network |
f5 | big-ip_advanced_firewall_manager | On BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a SQL injection vulnerability exists in an undisclosed … |
CWE-89
SQL Injection |
CVE-2021-23040 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196584 | 5.3 |
MEDIUM
Network |
f5 | big-ip_access_policy_manager | On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol (OCSP) verifi… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2021-23047 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196585 | 6.5 |
MEDIUM
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that al… |
CWE-22
Path Traversal |
CVE-2021-23043 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196586 | 7.5 |
HIGH
Network |
f5 |
big-ip_application_acceleration_manager big-ip_local_traffic_manager big-ip_advanced_web_application_firewall big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_secur… |
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclos… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2021-23042 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196587 | 6.1 |
MEDIUM
Network |
f5 |
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_domain_name_system
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists…
|
CWE-79
|
Cross-site Scripting
CVE-2021-23041
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196588 | 6.1 |
MEDIUM
Network |
f5 | big-ip_access_policy_manager | On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenti… |
CWE-601
Open Redirect |
CVE-2021-23052 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196589 | 5.3 |
MEDIUM
Network |
f5 |
big-ip_advanced_web_application_firewall big-ip_application_security_manager |
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF or BIG-IP ASM is enabled on a virtual server and th… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2021-23053 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196590 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_acceleration_manager big-ip_application_secur… |
On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed reque… |
NVD-CWE-noinfo
|
CVE-2021-23051 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |