Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232301	4.3	警告	pro2col	-	Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4168	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

232302	7.5	危険	zanfi solutions	-	Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4159	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

232303	6.8	警告	zanfi solutions	-	Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4158	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

232304	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4157	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

232305	7.5	危険	razorecommerce	-	RazorCommerce Shopping Cart の category_search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4143	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

232306	7.5	危険	x10media	-	x10Media x10 Automatic MP3 Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4141	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

232307	10	危険	technote	-	Technote の skin_shop/standard/3_plugin_twindow/twindow_notice.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4138	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

232308	7.8	危険	s60	-	Nokia E90 Communicator および Nseries N82 上で稼動している Symbian OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4135	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

232309	7.5	危険	phprealty	-	phpRealty の manager/static/view.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4134	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

232310	5	警告	phpBB	-	phpBB の search 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-4125	2012-12-20 18:52	2008-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199371	5.3	MEDIUM Network	huawei	magic_ui emui	There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.	CWE-22 Path Traversal	CVE-2021-22404	2024-11-21 14:50	2021-10-28	Show	GitHub Exploit DB Packet Storm

199372	9.8	CRITICAL Network	huawei	magic_ui emui	There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to…	NVD-CWE-noinfo	CVE-2021-22403	2024-11-21 14:50	2021-10-28	Show	GitHub Exploit DB Packet Storm

199373	7.5	HIGH Network	huawei	magic_ui emui	There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks.	NVD-CWE-noinfo	CVE-2021-22402	2024-11-21 14:50	2021-10-28	Show	GitHub Exploit DB Packet Storm

199374	7.5	HIGH Network	huawei	magic_ui emui	There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.	NVD-CWE-noinfo	CVE-2021-22401	2024-11-21 14:50	2021-10-28	Show	GitHub Exploit DB Packet Storm

199375	6.1	MEDIUM Network	rubyonrails	rails	A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.	CWE-601 Open Redirect	CVE-2021-22942	2024-11-21 14:50	2021-10-18	Show	GitHub Exploit DB Packet Storm

199376	9.8	CRITICAL Network	nodejs netapp siemens debian	node.js nextgen_api sinec_infrastructure_network_services debian_linux	Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.	CWE-416 Use After Free	CVE-2021-22930	2024-11-21 14:50	2021-10-7	Show	GitHub Exploit DB Packet Storm

199377	7.8	HIGH Local	google	slo_generator	SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past htt…	CWE-78 OS Command	CVE-2021-22557	2024-11-21 14:50	2021-10-4	Show	GitHub Exploit DB Packet Storm

199378	5.9	MEDIUM Network	haxx fedoraproject debian netapp oracle siemens apple splunk	curl fedora debian_linux cloud_backup clustered_data_ontap h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware	When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-22947	2024-11-21 14:50	2021-09-30	Show	GitHub Exploit DB Packet Storm

199379	7.5	HIGH Network	haxx debian fedoraproject netapp oracle apple siemens splunk	curl debian_linux fedora cloud_backup snapcenter oncommand_workflow_automation oncommand_insight clustered_data_ontap h300s_firmware h500s_firmware h700s_firmware h30…	A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSES…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-22946	2024-11-21 14:50	2021-09-30	Show	GitHub Exploit DB Packet Storm

199380	4.9	MEDIUM Network	microfocus	netiq_directory_and_resource_administrator	Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could…	CWE-863 Incorrect Authorization	CVE-2021-22535	2024-11-21 14:50	2021-09-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed