Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232091 5 警告 レッドハット - Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3274 2012-12-20 18:52 2008-09-10 Show GitHub Exploit DB Packet Storm
232092 5 警告 winsoftmagic - WinSoftMagic WRPC Lite におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3269 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
232093 7.5 危険 softacid - SoftAcid HRS Multi の picture_pic_bv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3266 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
232094 7.5 危険 Zoph - Zoph における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3258 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
232095 7.5 危険 siteframe - Siteframe CMS の folder.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3256 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
232096 6.8 警告 precoc - preCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3254 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
232097 7.5 危険 tpl design - tplSoccerSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3251 2012-12-20 18:52 2008-07-21 Show GitHub Exploit DB Packet Storm
232098 10 危険 ppmate - PPMate の PPMedia Class ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3242 2012-12-20 18:52 2008-07-21 Show GitHub Exploit DB Packet Storm
232099 7.5 危険 ultrastats - UltraStats の players-detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3241 2012-12-20 18:52 2008-07-21 Show GitHub Exploit DB Packet Storm
232100 9.3 危険 phpizabi - PHPizabi の system/v_cron_proc.php における任意のコードをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3239 2012-12-20 18:52 2008-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199821 7.5 HIGH
Network 		zte axon_11_5g_firmware A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authoriza… NVD-CWE-Other
CVE-2021-21732 2024-11-21 14:48 2021-05-19 Show GitHub Exploit DB Packet Storm
199822 5.3 MEDIUM
Network 		sensiolabs
fedoraproject 		symfony
fedora 		Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling de… - CVE-2021-21424 2024-11-21 14:48 2021-05-14 Show GitHub Exploit DB Packet Storm
199823 7.1 HIGH
Network 		jenkins xcode_integration Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21656 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199824 7.1 HIGH
Network 		jenkins p4 A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and pa… CWE-352
 Origin Validation Error 		CVE-2021-21655 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199825 4.3 MEDIUM
Network 		jenkins p4 Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server… - CVE-2021-21654 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199826 4.3 MEDIUM
Network 		jenkins xray_-_test_management_for_jira Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credent… - CVE-2021-21653 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199827 7.1 HIGH
Network 		jenkins xray_-_test_management_for_jira A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified… CWE-352
 Origin Validation Error 		CVE-2021-21652 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199828 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles. - CVE-2021-21651 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199829 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain inform… - CVE-2021-21650 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199830 5.4 MEDIUM
Network 		jenkins dashboard_view Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers wit… CWE-79
Cross-site Scripting 		CVE-2021-21649 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm