Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230901 5 警告 zxid - ZXID における証明書チェーンの検証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0051 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
230902 6.8 警告 PunBB - PunBB におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-7241 2012-12-20 19:10 2009-09-17 Show GitHub Exploit DB Packet Storm
230903 10 危険 ourproject.org - White_Dune White_Dune におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-7228 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
230904 7.5 危険 PHPNUKE - PHP-Nuke 用の Recipes モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7226 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
230905 4.3 警告 runcms - RunCMS の system/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7222 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
230906 6.8 警告 runcms - RunCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-7221 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
230907 7.5 危険 prototypejs - Prototype JavaScript フレームワークにおける "クロスサイト ajax リクエスト" を実行される脆弱性 CWE-Other
その他 		CVE-2008-7220 2012-12-20 19:10 2009-09-13 Show GitHub Exploit DB Packet Storm
230908 4.3 警告 WordPress.org - WordPress 用の Peter's Math Anti-Spam Spinoff プラグインにおける CAPTCHA 保護を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7216 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
230909 6.9 警告 soundblaster - Ensoniq PCI 1371 サウンドカードで使用されている CreativeLabs es1371mp.sys WDM 音声ドライバにおける SYSTEM 権限を取得される脆弱性 CWE-Other
その他 		CVE-2008-7211 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
230910 2.1 注意 RivetCode Software - RivetTracker におけるパスワードを特定される脆弱性 CWE-310
暗号の問題 		CVE-2008-7207 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196451 7.1 HIGH
Local 		videolan vlc_media_player A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. CWE-125
Out-of-bounds Read 		CVE-2021-25802 2024-11-21 14:55 2021-07-27 Show GitHub Exploit DB Packet Storm
196452 7.1 HIGH
Local 		videolan vlc_media_player A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. CWE-125
Out-of-bounds Read 		CVE-2021-25801 2024-11-21 14:55 2021-07-27 Show GitHub Exploit DB Packet Storm
196453 5.3 MEDIUM
Network 		ucms_project ucms UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php. CWE-209
Information Exposure Through an Error Message 		CVE-2021-25809 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196454 7.8 HIGH
Local 		bludit bludit A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file. CWE-94
Code Injection 		CVE-2021-25808 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196455 5.4 MEDIUM
Network 		online_doctor_appointment_system_php_full_source_code_project online_doctor_appointment_system_php_full_source_code Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HT… CWE-79
Cross-site Scripting 		CVE-2021-25791 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196456 5.4 MEDIUM
Network 		house_rental_and_property_listing_php_project house_rental_and_property_listing_php Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML vi… CWE-79
Cross-site Scripting 		CVE-2021-25790 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196457 6.1 MEDIUM
Network 		fantastic_blog_project fantastic_blog Cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php. CWE-79
Cross-site Scripting 		CVE-2021-26224 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196458 9.8 CRITICAL
Network 		casap_automated_enrollment_system_project casap_automated_enrollment_system SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php. CWE-89
SQL Injection 		CVE-2021-26223 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196459 9.8 CRITICAL
Network 		casap_automated_enrollment_system_project casap_automated_enrollment_system SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php. CWE-89
SQL Injection 		CVE-2021-26226 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196460 9.8 CRITICAL
Network 		simple_college_website_project simple_college_website SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php. CWE-89
SQL Injection 		CVE-2021-26232 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm