Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231901 6.6 警告 トレンドマイクロ - Trend Micro PC-Cillin Internet Security 2007 などで使用されている Trend Micro AntiVirus スキャンエンジンにおけるバッファオーバーフローの脆弱性 CWE-119
CWE-264
CVE-2007-4277 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231902 4.3 警告 visionera ab - VisionProject におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4265 2012-12-20 18:33 2007-08-9 Show GitHub Exploit DB Packet Storm
231903 7.5 危険 prozilla - Prozilla Pub Site Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4258 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231904 5 警告 ynp - YNP Portal System の showpage.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4256 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231905 4.3 警告 toolbar gaming - Internet Explorer 用の Toolbar Gaming ツールバーにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4248 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231906 9.3 危険 vietphp - VietPHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4235 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231907 4.3 警告 PHPNUKE - PHP-Nuke の Search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4212 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231908 7.5 危険 redline software - la-nai CMS の module.php における SQL インジェクションの脆弱性 - CVE-2007-4210 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231909 4.3 警告 The Sleuth Kit - Brian Carrier TSK の ext2fs.c におけるサービス運用妨害 (DoS) 脆弱性 - CVE-2007-4195 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231910 5 警告 TIBCO Software - TIBCO RV クライアントのデフォルト設定におけるメッセージの内容をキャプチャされる脆弱性 - CVE-2007-4160 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199471 5.4 MEDIUM
Adjacent 		sloan optima_eaf-100_firmware
optima_eaf-150_firmware
optima_eaf-200_firmware
optima_eaf-225_firmware
optima_eaf-250_firmware
optima_eaf-275_firmware
optima_eaf-350_firmware
optima_eaf… 		There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kin… CWE-306
Missing Authentication for Critical Function 		CVE-2021-20107 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199472 6.7 MEDIUM
Local 		tenable nessus Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaini… NVD-CWE-noinfo
CVE-2021-20079 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199473 6.1 MEDIUM
Network 		machform machform Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter. CWE-601
Open Redirect 		CVE-2021-20105 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199474 8.1 HIGH
Network 		machform machform Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-20104 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199475 6.1 MEDIUM
Network 		machform machform Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php. CWE-79
Cross-site Scripting 		CVE-2021-20103 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199476 8.8 HIGH
Network 		machform machform Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place. CWE-352
 Origin Validation Error 		CVE-2021-20102 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199477 6.1 MEDIUM
Network 		machform machform Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content. CWE-74
Injection 		CVE-2021-20101 2024-11-21 14:45 2021-06-30 Show GitHub Exploit DB Packet Storm
199478 6.7 MEDIUM
Local 		tenable nessus Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows ex… NVD-CWE-noinfo
CVE-2021-20100 2024-11-21 14:45 2021-06-28 Show GitHub Exploit DB Packet Storm
199479 6.7 MEDIUM
Local 		tenable nessus Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows ex… NVD-CWE-noinfo
CVE-2021-20099 2024-11-21 14:45 2021-06-28 Show GitHub Exploit DB Packet Storm
199480 7.5 HIGH
Network 		sonicwall sonicos
sonicosv 		A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-20019 2024-11-21 14:45 2021-06-24 Show GitHub Exploit DB Packet Storm