Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232171 10 危険 TYPO3 Association - TYPO3 用の air_filemanager エクステンションにおける任意の PHP コードされる脆弱性 CWE-94
コード・インジェクション
CVE-2008-2345 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
232172 4.3 警告 TYPO3 Association - TYPO3 用の air_filemanager エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2344 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
232173 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2339 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
232174 4.3 警告 Vastal I-Tech & Co. - Vastal I-Tech phpVID の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2335 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
232175 7.5 危険 phpway - Kostenloses Linkmanagementscript における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2301 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
232176 7.5 危険 加藤和良 - Web Slider の Admin.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-2298 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
232177 7.5 危険 roticv - Rantx の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-2297 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
232178 7.5 危険 rgboard - Rgboard の include/bbs.lib.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-2296 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
232179 4.3 警告 rgboard - Rgboard の rg_search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2295 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
232180 7.5 危険 tpvgames - MPCS の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-2293 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199761 7.8 HIGH
Local
iobit advanced_systemcare_ultimate A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to increased privi… CWE-269
 Improper Privilege Management
CVE-2021-21786 2024-11-21 14:48 2021-07-8 Show GitHub Exploit DB Packet Storm
199762 8.8 HIGH
Local
iobit advanced_systemcare_ultimate A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0dc, the first dword passed in t… NVD-CWE-Other
CVE-2021-21788 2024-11-21 14:48 2021-07-8 Show GitHub Exploit DB Packet Storm
199763 4.3 MEDIUM
Network
jenkins requests Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified … CWE-862
 Missing Authorization
CVE-2021-21676 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199764 6.5 MEDIUM
Network
jenkins requests A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests. CWE-352
 Origin Validation Error
CVE-2021-21675 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199765 4.3 MEDIUM
Network
jenkins requests A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests. - CVE-2021-21674 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199766 6.1 MEDIUM
Network
jenkins cas Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks. - CVE-2021-21673 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199767 4.3 MEDIUM
Network
jenkins selenium_html_report Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE
CVE-2021-21672 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199768 7.5 HIGH
Network
jenkins jenkins Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login. - CVE-2021-21671 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199769 4.3 MEDIUM
Network
jenkins jenkins Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permissi… - CVE-2021-21670 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
199770 7.5 HIGH
Local
dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa…
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co… CWE-787
 Out-of-bounds Write
CVE-2021-21574 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm