Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232011 7.5 危険 woltlab - WoltLab Burning Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0857 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232012 7.5 危険 WordPress.org - WordPress 用の Dean Logan WP-People プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0845 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232013 6.4 警告 statcountex - StatCounteX における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0843 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232014 4.4 警告 publicwarehouse - Public Warehouse LightBlog の view_member.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0840 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232015 4.3 警告 ソフォス - Sophos ES1000 および ES4000 Email Security Appliance の Web の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0838 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232016 7.5 危険 simple cms - Simple CMS の indexen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0835 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
232017 7.5 危険 PHPNUKE - PHP-Nuke の Books モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0827 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
232018 3.6 注意 scribe - Scribe の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0822 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
232019 3.6 注意 plutostatus - PlutoStatus Locator の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0819 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
232020 6.4 警告 truc - TRUC の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0814 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199561 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML pag… NVD-CWE-Other
CVE-2021-21133 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199562 9.6 CRITICAL
Network 		google
microsoft 		chrome
edge_chromium 		Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-21132 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199563 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. CWE-59
CWE-434
Link Following
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-21131 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199564 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. NVD-CWE-Other
CVE-2021-21130 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199565 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. NVD-CWE-Other
CVE-2021-21129 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199566 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
 Out-of-bounds Write 		CVE-2021-21128 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199567 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension. NVD-CWE-Other
CVE-2021-21127 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199568 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. CWE-20
 Improper Input Validation  		CVE-2021-21126 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199569 8.1 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. CWE-59
Link Following 		CVE-2021-21125 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
199570 9.6 CRITICAL
Network 		google
microsoft 		chrome
edge_chromium 		Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-21124 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm