Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230721	7.5	危険	robocode	-	Robocode における "Robocode ゲーム内部にアクセスされる" 脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2078	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230722	10	危険	plain black	-	Plain Black WebGUI における脆弱性	CWE-noinfo 情報不足	CVE-2008-2077	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230723	7.5	危険	successkid	-	Harris Yusuf Arifin Harris Wap Chat における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2074	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230724	7.5	危険	virtual design studios	-	Virtual Design Studio vlbook の include/global.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2073	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230725	4.3	警告	virtual design studios	-	Virtual Design Studio vlbook の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2072	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230726	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2068	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

230727	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Jokes Site Script の jokes.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2065	2012-12-20 18:52	2008-05-2	Show	GitHub Exploit DB Packet Storm

230728	10	危険	phpgedview	-	PhpGedView における脆弱性	CWE-noinfo 情報不足	CVE-2008-2064	2012-12-20 18:52	2008-05-2	Show	GitHub Exploit DB Packet Storm

230729	4.3	警告	softpedia	-	Softpedia SiteXS CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2046	2012-12-20 18:52	2008-05-1	Show	GitHub Exploit DB Packet Storm

230730	5	警告	SugarCRM	-	SugarCRM Sugar Community Edition における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2045	2012-12-20 18:52	2008-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196641	9.8	CRITICAL Network	hr_portal_project	hr_portal	The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.	CWE-502 Deserialization of Untrusted Data	CVE-2021-22855	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196642	7.5	HIGH Network	hr_portal_project	hr_portal	The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.	CWE-89 SQL Injection	CVE-2021-22854	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196643	5.4	MEDIUM Network	hr_portal_project	hr_portal	The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, fu…	NVD-CWE-Other	CVE-2021-22853	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196644	7.5	HIGH Network	google	gerrit	Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2021-22553	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196645	8.8	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-22858	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196646	7.5	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.	CWE-22 Path Traversal	CVE-2021-22857	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196647	7.5	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.	CWE-89 SQL Injection	CVE-2021-22856	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

196648	9.8	CRITICAL Network	microfocus	operations_bridge_manager	Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could…	NVD-CWE-noinfo	CVE-2021-22504	2024-11-21 14:50	2021-02-13	Show	GitHub Exploit DB Packet Storm

196649	9.8	CRITICAL Network	advantech	iview	Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'.	CWE-89 SQL Injection	CVE-2021-22658	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

196650	6.1	MEDIUM Network	rubyonrails fedoraproject	rails fedora	The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" forma…	CWE-601 Open Redirect	CVE-2021-22881	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed