Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230961 6.8 警告 WordPress.org - WordPress の wp-includes/query.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6318 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230962 5.5 警告 Real Time Logic - BarracudaDrive Web Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6317 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230963 4.3 警告 Real Time Logic - BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6316 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230964 4 警告 Real Time Logic - Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2007-6315 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230965 5 警告 Real Time Logic - BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6314 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230966 4.3 警告 ウェブセンス - Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6312 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230967 4.3 警告 webSPELL - webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6309 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
230968 5 警告 phpmychat - phpMyChat の users_popupL.php3 における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6296 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
230969 7.5 危険 xigla - Xigla Absolute Banner Manager .NET の abm.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6291 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
230970 7.5 危険 tecnick.com - TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6288 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196911 7.5 HIGH
Network 		zte zxv10_b860h_v5.0_firmware A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th… CWE-276
Incorrect Default Permissions  		CVE-2021-21737 2024-11-21 14:48 2021-06-24 Show GitHub Exploit DB Packet Storm
196912 6.1 MEDIUM
Network 		mongo-express_project mongo-express mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a… - CVE-2021-21422 2024-11-21 14:48 2021-06-22 Show GitHub Exploit DB Packet Storm
196913 9.1 CRITICAL
Network 		contiki-ng contiki-ng Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and pri… - CVE-2021-21410 2024-11-21 14:48 2021-06-19 Show GitHub Exploit DB Packet Storm
196914 9.8 CRITICAL
Network 		jenkins generic_webhook_trigger Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21669 2024-11-21 14:48 2021-06-18 Show GitHub Exploit DB Packet Storm
196915 10.0 CRITICAL
Network 		opener_project opener An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead … CWE-125
Out-of-bounds Read 		CVE-2021-21777 2024-11-21 14:48 2021-06-17 Show GitHub Exploit DB Packet Storm
196916 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission. CWE-79
Cross-site Scripting 		CVE-2021-21668 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196917 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with… CWE-79
Cross-site Scripting 		CVE-2021-21667 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196918 7.5 HIGH
Network 		otrs otrs There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending speciall… CWE-79
Cross-site Scripting 		CVE-2021-21441 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196919 6.7 MEDIUM
Local 		dell poweredge_r640_firmware
poweredge_r740_firmware
poweredge_r740xd_firmware
poweredge_r940_firmware
poweredge_r540_firmware
poweredge_r440_firmware
poweredge_t440_firmware
poweredg… 		Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerabil… CWE-125
Out-of-bounds Read 		CVE-2021-21557 2024-11-21 14:48 2021-06-15 Show GitHub Exploit DB Packet Storm
196920 6.7 MEDIUM
Local 		dell poweredge_r640_firmware
poweredge_r740_firmware
poweredge_r740xd_firmware
poweredge_r940_firmware
poweredge_r840_firmware
poweredge_r940xa_firmware
poweredge_t640_firmware
powere… 		Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious u… CWE-787
 Out-of-bounds Write 		CVE-2021-21556 2024-11-21 14:48 2021-06-15 Show GitHub Exploit DB Packet Storm