Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231481 10 危険 ryo-oh-ki - Shareaza における脆弱性 CWE-noinfo
情報不足 		CVE-2008-7164 2012-12-20 19:10 2009-09-4 Show GitHub Exploit DB Packet Storm
231482 6.8 警告 sinecms - SineCMS の mods/Integrated/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7163 2012-12-20 19:10 2009-09-4 Show GitHub Exploit DB Packet Storm
231483 6.8 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトリクエストフォージェリ (CSRF) 保護を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7248 2012-12-20 19:10 2008-11-18 Show GitHub Exploit DB Packet Storm
231484 5.8 警告 silcnet - SILC Toolkit の silcd におけるスタック領域を上書きされる脆弱性 CWE-134
書式文字列の問題 		CVE-2008-7160 2012-12-20 19:10 2009-09-10 Show GitHub Exploit DB Packet Storm
231485 5.8 警告 silcnet - SILC Toolkit の lib/silcasn1/silcasn1_encode.c におけるスタック領域を上書きされる脆弱性 CWE-134
書式文字列の問題 		CVE-2008-7159 2012-12-20 19:10 2009-09-10 Show GitHub Exploit DB Packet Storm
231486 7.5 危険 phprisk - NetRisk における任意のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7155 2012-12-20 19:10 2009-09-2 Show GitHub Exploit DB Packet Storm
231487 6.8 警告 Simon Rycroft - SID における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7152 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
231488 10 危険 synfig - Synfig Animation Studio における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-7148 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
231489 10 危険 RARLAB - RARLAB WinRAR における脆弱性 CWE-noinfo
情報不足 		CVE-2008-7144 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
231490 6.8 警告 phpBB - phpBB におけるセッションをハイジャックされる脆弱性 CWE-200
情報漏えい 		CVE-2008-7143 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196991 9.8 CRITICAL
Network 		talkyard talkyard In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the … CWE-613
 Insufficient Session Expiration 		CVE-2021-25981 2024-11-21 14:55 2022-01-3 Show GitHub Exploit DB Packet Storm
196992 5.4 MEDIUM
Network 		requarks wiki.js In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while u… CWE-79
Cross-site Scripting 		CVE-2021-25993 2024-11-21 14:55 2021-12-30 Show GitHub Exploit DB Packet Storm
196993 7.3 HIGH
Network 		if-me ifme In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete … NVD-CWE-Other
CVE-2021-25991 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm
196994 5.4 MEDIUM
Network 		if-me ifme In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetched via an iframe. CWE-79
Cross-site Scripting 		CVE-2021-25990 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm
196995 5.4 MEDIUM
Network 		if-me ifme In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. It can be exploited by making a victim a Leader of a group which triggers the payload for … CWE-79
Cross-site Scripting 		CVE-2021-25989 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm
196996 5.4 MEDIUM
Network 		if-me ifme In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally request to the admin. CWE-79
Cross-site Scripting 		CVE-2021-25988 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm
196997 3.3 LOW
Local 		samsung pay Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication. NVD-CWE-Other
CVE-2021-25527 2024-11-21 14:55 2021-12-9 Show GitHub Exploit DB Packet Storm
196998 5.5 MEDIUM
Local 		samsung blockchain_wallet Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action. NVD-CWE-Other
CVE-2021-25526 2024-11-21 14:55 2021-12-9 Show GitHub Exploit DB Packet Storm
196999 6.5 MEDIUM
Adjacent 		samsung pay Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2021-25525 2024-11-21 14:55 2021-12-9 Show GitHub Exploit DB Packet Storm
197000 3.3 LOW
Local 		samsung contacts Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID. CWE-922
 Insecure Storage of Sensitive Information 		CVE-2021-25524 2024-11-21 14:55 2021-12-9 Show GitHub Exploit DB Packet Storm