Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230911 7.5 危険 WordPress.org - WordPress のクッキー認証メソッドにおけるクッキーを偽造される脆弱性 CWE-287
不適切な認証 		CVE-2008-1930 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
230912 3.5 注意 The phpMyAdmin Project - phpMyAdmin における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-1924 2012-12-20 18:52 2008-04-22 Show GitHub Exploit DB Packet Storm
230913 10 危険 sarg - Sarg におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1922 2012-12-20 18:52 2008-05-13 Show GitHub Exploit DB Packet Storm
230914 7.5 危険 YourFreeWorld.com - YourFreeWorld Apartment Search Script の listtest.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1919 2012-12-20 18:52 2008-04-23 Show GitHub Exploit DB Packet Storm
230915 6 警告 PHP-Fusion - PHP-Fusion の submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1918 2012-12-20 18:52 2008-04-23 Show GitHub Exploit DB Packet Storm
230916 7.5 危険 w2b - W2B Online Banking の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1893 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230917 5 警告 Ruby-lang.org - Ruby の WEBrick におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1891 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230918 7.5 危険 xplodphp - XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1889 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230919 5 警告 wikepage - Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1884 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230920 6.8 警告 VideoLAN - VLC の ParseSSA 関数 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1881 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196591 9.8 CRITICAL
Network 		markdown_to_pdf_project markdown_to_pdf The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. NVD-CWE-noinfo
CVE-2021-23639 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196592 9.8 CRITICAL
Network 		c2fo comb All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23561 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196593 9.1 CRITICAL
Network 		h2database h2 The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data fr… CWE-611
XXE 		CVE-2021-23463 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196594 7.2 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
videojet_decoder_7513_firmware
videojet_decoder_8000_firmware 		A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BV… CWE-78
OS Command  		CVE-2021-23862 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196595 6.5 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.… NVD-CWE-Other
CVE-2021-23861 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196596 6.1 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header tha… CWE-79
Cross-site Scripting 		CVE-2021-23860 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196597 7.5 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
access_easy_controller_firmware
video_recording_manager_exporter
building_integration_system
access_professional_edition 		An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-23859 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196598 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway
sd-wan 		An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface acce… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22956 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
196599 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway 		A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to caus… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22955 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
196600 9.8 CRITICAL
Network 		ajaxpro.2_project ajaxpro.2 All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23758 2024-11-21 14:51 2021-12-4 Show GitHub Exploit DB Packet Storm