Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231301 6.8 警告 smallnuke - SmallNuke の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0147 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231302 7.5 危険 phprisk - NetRisk の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0144 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231303 7.5 危険 spacial audio solutions - samPHPweb の common/db.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0143 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231304 9.3 危険 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6730 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
231305 4.3 警告 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6729 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
231306 6.8 警告 webportal - WebPortal CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0142 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231307 7.5 危険 webportal - WebPortal CMS の actions.php における任意のアカウントへのアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0141 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231308 6.4 警告 uebimiau - Uebimiau Webmail の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0140 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231309 7.5 危険 snetworks - SNETWORKS PHP CLASSIFIEDS の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0137 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
231310 5 警告 snitz forums 2000 - Snitz Forums 2000 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0136 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197301 7.5 HIGH
Local 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2021-21572 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
197302 6.5 MEDIUM
Network 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may explo… CWE-295
Improper Certificate Validation  		CVE-2021-21571 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
197303 7.5 HIGH
Network 		zte zxv10_b860h_v5.0_firmware A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th… CWE-276
Incorrect Default Permissions  		CVE-2021-21737 2024-11-21 14:48 2021-06-24 Show GitHub Exploit DB Packet Storm
197304 6.1 MEDIUM
Network 		mongo-express_project mongo-express mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a… - CVE-2021-21422 2024-11-21 14:48 2021-06-22 Show GitHub Exploit DB Packet Storm
197305 9.1 CRITICAL
Network 		contiki-ng contiki-ng Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and pri… - CVE-2021-21410 2024-11-21 14:48 2021-06-19 Show GitHub Exploit DB Packet Storm
197306 9.8 CRITICAL
Network 		jenkins generic_webhook_trigger Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21669 2024-11-21 14:48 2021-06-18 Show GitHub Exploit DB Packet Storm
197307 10.0 CRITICAL
Network 		opener_project opener An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead … CWE-125
Out-of-bounds Read 		CVE-2021-21777 2024-11-21 14:48 2021-06-17 Show GitHub Exploit DB Packet Storm
197308 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission. CWE-79
Cross-site Scripting 		CVE-2021-21668 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
197309 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with… CWE-79
Cross-site Scripting 		CVE-2021-21667 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
197310 7.5 HIGH
Network 		otrs otrs There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending speciall… CWE-79
Cross-site Scripting 		CVE-2021-21441 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm