Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231471 5 警告 WordPress.org - WordPress 用の Unnamed テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4166 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231472 4.3 警告 WordPress.org
xu yiyang		 - WordPress 用の Blue Memories テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4165 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231473 7.8 危険 TIBCO Software - TIBCO RV におけるトラフィックをキャプチャされる脆弱性 - CVE-2007-4162 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231474 4.3 警告 TIBCO Software - TIBCO RV の rvd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4161 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231475 4.3 警告 vikingboard - Vikingboard における重要な情報を取得される脆弱性 - CVE-2007-4089 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231476 4.3 警告 vikingboard - Vikingboard におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4088 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231477 5 警告 Tincan - Webbler CMS における任意の数量の偽装メールを送信される脆弱性 - CVE-2007-4073 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231478 5 警告 Tincan - Webbler CMS における重要な情報を取得される脆弱性 - CVE-2007-4072 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231479 4.3 警告 Tincan - Webbler CMS の uploader/index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4071 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231480 5.8 警告 webyapar - Webyapar における SQL インジェクションの脆弱性 - CVE-2007-4068 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197981 7.2 HIGH
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral. CWE-22
Path Traversal 		CVE-2021-20072 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197982 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs. CWE-79
Cross-site Scripting 		CVE-2021-20071 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197983 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs. CWE-79
Cross-site Scripting 		CVE-2021-20070 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197984 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs. CWE-79
Cross-site Scripting 		CVE-2021-20069 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197985 4.8 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages. CWE-79
Cross-site Scripting 		CVE-2021-20068 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197986 5.3 MEDIUM
Network 		racom m\!dge_firmware Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication. CWE-306
Missing Authentication for Critical Function 		CVE-2021-20067 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197987 5.6 MEDIUM
Network 		jsdom_project jsdom JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled. NVD-CWE-noinfo
CVE-2021-20066 2024-11-21 14:45 2021-02-17 Show GitHub Exploit DB Packet Storm
197988 9.8 CRITICAL
Network 		sonicwall sma_100_firmware
sma_200_firmware
sma_210_firmware
sma_400_firmware
sma_410_firmware
sma_500v 		A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. T… CWE-89
SQL Injection 		CVE-2021-20016 2024-11-21 14:45 2021-02-4 Show GitHub Exploit DB Packet Storm
197989 5.0 MEDIUM
Local 		oracle zfs_storage_appliance
hyperion_infrastructure_technology
enterprise_manager_ops_center 		Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows h… NVD-CWE-noinfo
CVE-2021-1999 2024-11-21 14:45 2021-01-21 Show GitHub Exploit DB Packet Storm
197990 3.8 LOW
Network 		oracle
fedoraproject
netapp 		mysql
fedora
snapcenter
oncommand_workflow_automation
oncommand_insight
active_iq_unified_manager 		Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privi… NVD-CWE-noinfo
CVE-2021-1998 2024-11-21 14:45 2021-01-21 Show GitHub Exploit DB Packet Storm