Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247771 4.3 警告 buildanichestore3 - BANS の search スクリプトにおけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2531 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
247772 7.5 危険 advanced links management - ALM の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2529 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
247773 10 危険 シトリックス・システムズ - Citrix Access Gateway Standard Edition および Advanced Edition におけるネットワークリソースにアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2008-2528 2012-06-26 16:02 2008-05-9 Show GitHub Exploit DB Packet Storm
247774 4.3 警告 actualscripts - 複数の ActualScripts ActualAnalyzer 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2527 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
247775 7.5 危険 BIGACE - BigACE における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2520 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
247776 6.8 警告 Core FTP - Core FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2519 2012-06-26 16:02 2008-02-18 Show GitHub Exploit DB Packet Storm
247777 7.5 危険 excuse online - Excuse Online の pwd.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2509 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
247778 4.3 警告 brown bear software - Brown Bear Software Calcium の Calcium40.pl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2507 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
247779 7.5 危険 emule - eMule X-Ray の Web サーバにおけるメモリ破損を誘発される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2502 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
247780 4.3 警告 badongo - Campus Bulletin Board の post3/Book.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2493 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197851 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25225 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197852 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25224 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197853 8.8 HIGH
Network 		wisc htcondor HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method. CWE-306
Missing Authentication for Critical Function 		CVE-2021-25312 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197854 9.9 CRITICAL
Network 		wisc htcondor condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by ro… CWE-22
Path Traversal 		CVE-2021-25311 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197855 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs. CWE-79
Cross-site Scripting 		CVE-2021-25325 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197856 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp. CWE-79
Cross-site Scripting 		CVE-2021-25324 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197857 9.1 CRITICAL
Network 		misp misp The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-25323 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197858 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. T… CWE-787
 Out-of-bounds Write 		CVE-2021-25178 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
197859 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, pot… CWE-843
Type Confusion 		CVE-2021-25177 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
197860 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash,… CWE-476
 NULL Pointer Dereference 		CVE-2021-25176 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm