Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230731 6.4 警告 uebimiau - Uebimiau Webmail の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0140 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230732 7.5 危険 snetworks - SNETWORKS PHP CLASSIFIEDS の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0137 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230733 5 警告 snitz forums 2000 - Snitz Forums 2000 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0136 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230734 5 警告 snitz forums 2000 - Snitz Forums 2000 におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0135 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230735 4.3 警告 snitz forums 2000 - Snitz Forums 2000 の Forums/setup.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0134 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230736 7.5 危険 thomas perez - Tribisur における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0133 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230737 5 警告 pragma systems - Pragma FortressSSH におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0132 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230738 6.8 警告 siteatschool - Site@School の starnet/addons/slideshow_full.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0129 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
230739 4.3 警告 php-stats - Michael Wagner phpstats の phpstats.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0125 2012-12-20 18:34 2008-03-24 Show GitHub Exploit DB Packet Storm
230740 4.3 警告 s9y - S9Y におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0124 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197021 4.9 MEDIUM
Network 		sonicwall sma100_firmware A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earli… CWE-287
Improper Authentication 		CVE-2021-20018 2024-11-21 14:45 2021-03-13 Show GitHub Exploit DB Packet Storm
197022 8.8 HIGH
Network 		sonicwall sma100_firmware A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5… CWE-78
OS Command  		CVE-2021-20017 2024-11-21 14:45 2021-03-13 Show GitHub Exploit DB Packet Storm
197023 8.8 HIGH
Network 		tenable tenable.sc Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution (RCE) on the … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-20076 2024-11-21 14:45 2021-03-4 Show GitHub Exploit DB Packet Storm
197024 7.5 HIGH
Network 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		Windows Remote Procedure Call Information Disclosure Vulnerability NVD-CWE-noinfo
CVE-2021-1734 2024-11-21 14:45 2021-02-26 Show GitHub Exploit DB Packet Storm
197025 7.8 HIGH
Local 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd. CWE-269
 Improper Privilege Management 		CVE-2021-20075 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197026 8.8 HIGH
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands. CWE-78
OS Command  		CVE-2021-20074 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197027 8.8 HIGH
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries. CWE-352
 Origin Validation Error 		CVE-2021-20073 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197028 7.2 HIGH
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral. CWE-22
Path Traversal 		CVE-2021-20072 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197029 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs. CWE-79
Cross-site Scripting 		CVE-2021-20071 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197030 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs. CWE-79
Cross-site Scripting 		CVE-2021-20070 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm