Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232001 7.5 危険 TYPO3 Association - TYPO3 用の DAM Frontend エクステンションにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3041 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
232002 5 警告 TYPO3 Association - TYPO3 用の DAM Frontend エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3040 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
232003 4.3 警告 Vtiger - vtiger CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3101 2012-12-20 18:52 2008-09-3 Show GitHub Exploit DB Packet Storm
232004 6.5 警告 phplizardo - ImperialBB における任意の PHP コードをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3093 2012-12-20 18:52 2008-07-9 Show GitHub Exploit DB Packet Storm
232005 7.5 危険 xpoze - Xpoze Pro の user.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3089 2012-12-20 18:52 2008-07-9 Show GitHub Exploit DB Packet Storm
232006 7.5 危険 Simple Machines - SMF における脆弱性 CWE-noinfo
情報不足 		CVE-2008-3073 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
232007 7.5 危険 Simple Machines - Simple Machines Forum における脆弱性 CWE-189
数値処理の問題 		CVE-2008-3072 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
232008 2.1 注意 SUSE - SUSE openSUSE の sudo におけるパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-3067 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
232009 7.5 危険 v-webmail - V-webmail の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3063 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
232010 7.5 危険 TYPO3 Association - TYPO3 用の DAM Frontend エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3039 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199441 8.1 HIGH
Network 		jenkins config_file_provider Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2021-21642 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199442 6.7 MEDIUM
Local 		dell powerscale_onefs Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root. CWE-78
OS Command  		CVE-2021-21526 2024-11-21 14:48 2021-04-21 Show GitHub Exploit DB Packet Storm
199443 7.5 HIGH
Network 		filecoin lotus Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized"… - CVE-2021-21405 2024-11-21 14:48 2021-04-16 Show GitHub Exploit DB Packet Storm
199444 7.5 HIGH
Network 		ampache ampache Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you … CWE-287
Improper Authentication 		CVE-2021-21399 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199445 7.8 HIGH
Local 		accusoft imagegear An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provi… CWE-787
 Out-of-bounds Write 		CVE-2021-21784 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199446 4.3 MEDIUM
Network 		sap netweaver_application_server_java SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerabi… CWE-290
 Authentication Bypass by Spoofing 		CVE-2021-21492 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199447 6.5 MEDIUM
Network 		sap netweaver_application_server_java An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged u… NVD-CWE-noinfo
CVE-2021-21485 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199448 4.9 MEDIUM
Network 		sap solution_manager Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable compone… NVD-CWE-noinfo
CVE-2021-21483 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199449 8.3 HIGH
Adjacent 		sap netweaver_master_data_management SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful… NVD-CWE-noinfo
CVE-2021-21482 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm
199450 8.1 HIGH
Network 		zte zxcloud_irai_firmware A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The at… CWE-352
 Origin Validation Error 		CVE-2021-21731 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm