Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230871	7.5	危険	TYPO3 Association	-	TYPO3 用の Clan Users List エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0343	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230872	7.5	危険	TYPO3 Association	-	TYPO3 用の job_reports エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0342	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230873	7.5	危険	TYPO3 Association	-	TYPO3 用の BB Simple Jobs エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0341	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230874	7.5	危険	TYPO3 Association	-	TYPO3 用の MJS Event Pro エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0340	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230875	7.5	危険	TYPO3 Association	-	TYPO3 用の User Links エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0339	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230876	7.5	危険	TYPO3 Association	-	TYPO3 用の TT_Products エディタエクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0338	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230877	7.5	危険	TYPO3 Association	-	TYPO3 用の tt_news Mail alert エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0337	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230878	5	警告	TYPO3 Association	-	TYPO3 用の kiddog_mysqldumper エクステンションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-0336	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230879	7.5	危険	stefan tannhaeuser	-	TYPO3 用の tv21_talkshow エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0332	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

230880	4.3	警告	stefan tannhaeuser	-	TYPO3 用の tv21_talkshow エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0331	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196091	7.2	HIGH Network	mybb	mybb	SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).	CWE-89 SQL Injection	CVE-2021-27947	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196092	8.8	HIGH Network	mybb	mybb	SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).	CWE-89 SQL Injection	CVE-2021-27946	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196093	8.8	HIGH Network	mybb	mybb	SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.	CWE-89 SQL Injection	CVE-2021-27890	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196094	6.1	MEDIUM Network	mybb	mybb	Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.	CWE-79 Cross-site Scripting	CVE-2021-27889	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196095	9.8	CRITICAL Network	shopxo	shopxo	A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-27817	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196096	6.1	MEDIUM Network	openmaint	openmaint	Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Flo…	CWE-79 Cross-site Scripting	CVE-2021-27695	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196097	7.0	HIGH Local	ssh	tectia_client tectia_connectsecure tectia_server	SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected.	NVD-CWE-noinfo	CVE-2021-27893	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196098	7.8	HIGH Local	ssh	tectia_client tectia_connectsecure tectia_server	SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected.	NVD-CWE-noinfo	CVE-2021-27892	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196099	8.8	HIGH Network	ssh	tectia_client tectia_connectsecure tectia_server	SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected.	NVD-CWE-noinfo	CVE-2021-27891	2024-11-21 14:58	2021-03-16	Show	GitHub Exploit DB Packet Storm

196100	7.5	HIGH Network	apache	openmeetings	If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0	NVD-CWE-noinfo	CVE-2021-27576	2024-11-21 14:58	2021-03-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed