Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232071 7.5 危険 pragmaticutopia - Joomla! 用の com_puarcade コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1733 2012-12-20 18:52 2008-04-11 Show GitHub Exploit DB Packet Storm
232072 7.5 危険 predictionfootball - Prediction Football の showpredictionsformatch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1732 2012-12-20 18:52 2008-04-11 Show GitHub Exploit DB Packet Storm
232073 9.3 危険 tumbleweed - Tumbleweed SecureTransport Server の vcst_en.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1724 2012-12-20 18:52 2008-04-11 Show GitHub Exploit DB Packet Storm
232074 7.5 危険 Samba Project - rsync におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1720 2012-12-20 18:52 2008-04-8 Show GitHub Exploit DB Packet Storm
232075 6.8 警告 tru-zone - Nuke ET におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-1719 2012-12-20 18:52 2008-04-10 Show GitHub Exploit DB Packet Storm
232076 5 警告 woltlab - WoltLab Burning Board の WCF におけるフルパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2008-1717 2012-12-20 18:52 2008-04-9 Show GitHub Exploit DB Packet Storm
232077 4.3 警告 woltlab - WoltLab Burning Board の WCF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1716 2012-12-20 18:52 2008-04-9 Show GitHub Exploit DB Packet Storm
232078 5 警告 terong - Terong PHP Photo Gallery における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2008-1711 2012-12-20 18:52 2008-04-9 Show GitHub Exploit DB Packet Storm
232079 10 危険 TIBCO Software - TIBCO Software EMS および iProcess Engine におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1704 2012-12-20 18:52 2008-04-11 Show GitHub Exploit DB Packet Storm
232080 9.3 危険 TIBCO Software - TIBCO Software Rendezvous におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1703 2012-12-20 18:52 2008-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199671 7.5 HIGH
Network
wago 0852-0303_firmware
0852-1305_firmware
0852-1505_firmware
0852-1305\/000-001_firmware
0852-1505\/000-001_firmware
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2021-20995 2024-11-21 14:47 2021-05-13 Show GitHub Exploit DB Packet Storm
199672 6.1 MEDIUM
Network
wago 0852-0303_firmware
0852-1305_firmware
0852-1505_firmware
0852-1305\/000-001_firmware
0852-1505\/000-001_firmware
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management. CWE-79
Cross-site Scripting
CVE-2021-20994 2024-11-21 14:47 2021-05-13 Show GitHub Exploit DB Packet Storm
199673 5.3 MEDIUM
Network
wago 0852-0303_firmware
0852-1305_firmware
0852-1505_firmware
0852-1305\/000-001_firmware
0852-1505\/000-001_firmware
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory. CWE-200
Information Exposure
CVE-2021-20993 2024-11-21 14:47 2021-05-13 Show GitHub Exploit DB Packet Storm
199674 7.5 HIGH
Network
hilscher
pepperl-fuchs
rcx_rtos
ice1-16di-g60l-v1d_firmware
ice1-16dio-g60l-c1-v1d_firmware
ice1-16dio-g60l-v1d_firmware
ice1-8di8do-g60l-c1-v1d_firmware
ice1-8di8do-g60l-v1d_firmware
ice1-8iol-g30l-v1d_f…
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2021-20988 2024-11-21 14:47 2021-05-13 Show GitHub Exploit DB Packet Storm
199675 6.1 MEDIUM
Network
ec-cube ec-cube Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUB… CWE-79
Cross-site Scripting
CVE-2021-20717 2024-11-21 14:47 2021-05-10 Show GitHub Exploit DB Packet Storm
199676 5.2 MEDIUM
Local
octobercms october October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE… NVD-CWE-Other
CVE-2021-21264 2024-11-21 14:47 2021-05-4 Show GitHub Exploit DB Packet Storm
199677 8.8 HIGH
Network
google
fedoraproject
debian
chrome
fedora
debian_linux
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
 Out-of-bounds Write
CVE-2021-21233 2024-11-21 14:47 2021-05-1 Show GitHub Exploit DB Packet Storm
199678 8.8 HIGH
Network
google
fedoraproject
debian
chrome
fedora
debian_linux
Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free
CVE-2021-21232 2024-11-21 14:47 2021-05-1 Show GitHub Exploit DB Packet Storm
199679 8.8 HIGH
Network
google
debian
fedoraproject
chrome
debian_linux
fedora
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
 Out-of-bounds Write
CVE-2021-21231 2024-11-21 14:47 2021-05-1 Show GitHub Exploit DB Packet Storm
199680 8.8 HIGH
Network
google
fedoraproject
debian
chrome
fedora
debian_linux
Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-843
Type Confusion
CVE-2021-21230 2024-11-21 14:47 2021-05-1 Show GitHub Exploit DB Packet Storm