Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230961 7.5 危険 PHPNUKE - PHP-Nuke 用の EasyContent モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0880 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230962 7.5 危険 PHPNUKE - PHP-Nuke 用の Web_Links モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0879 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230963 7.5 危険 runcms - RunCMS 用の MyAnnonces モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0878 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230964 4.3 警告 SmarterTools Inc. - SmarterTools SmarterMail Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0872 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
230965 7.5 危険 woltlab - WoltLab Burning Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0857 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230966 7.5 危険 WordPress.org - WordPress 用の Dean Logan WP-People プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0845 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230967 6.4 警告 statcountex - StatCounteX における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0843 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230968 4.4 警告 publicwarehouse - Public Warehouse LightBlog の view_member.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0840 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230969 4.3 警告 ソフォス - Sophos ES1000 および ES4000 Email Security Appliance の Web の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0838 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
230970 7.5 危険 simple cms - Simple CMS の indexen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0835 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197041 4.3 MEDIUM
Network 		jenkins cloud_statistics Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view … CWE-862
 Missing Authorization 		CVE-2021-21631 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
197042 5.4 MEDIUM
Network 		jenkins extra_columns Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers … CWE-79
Cross-site Scripting 		CVE-2021-21630 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
197043 8.8 HIGH
Network 		jenkins build_with_parameters A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters. CWE-352
 Origin Validation Error 		CVE-2021-21629 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
197044 5.4 MEDIUM
Network 		jenkins build_with_parameters Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job… CWE-79
Cross-site Scripting 		CVE-2021-21628 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
197045 7.5 HIGH
Network 		zte zxhn_f623_firmware A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service.… NVD-CWE-noinfo
CVE-2021-21727 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
197046 6.5 MEDIUM
Network 		wire wire_server wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in… - CVE-2021-21396 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
197047 8.1 HIGH
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full veri… CWE-295
Improper Certificate Validation  		CVE-2021-21374 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
197048 5.9 MEDIUM
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In ca… CWE-295
Improper Certificate Validation  		CVE-2021-21373 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
197049 8.8 HIGH
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitra… CWE-78
OS Command  		CVE-2021-21372 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
197050 8.8 HIGH
Network 		buddypress buddypress BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rig… - CVE-2021-21389 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm