Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247781 7.5 危険 badongo - Campus Bulletin Board における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2492 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
247782 9.3 危険 ebay - eBay Enhanced Picture Uploader ActiveX コントロールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-2475 2012-06-26 16:02 2009-06-9 Show GitHub Exploit DB Packet Storm
247783 6.5 警告 beaussier - RoomPHPlanning の admin/userform.php における新規に admin アカウントを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2488 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
247784 10 危険 emule - eMule Plus における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-2486 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
247785 6.8 警告 badongo - phpFix における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2479 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
247786 6.8 警告 entertainmentscript - EntertainmentScript の page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2459 2012-06-26 16:02 2008-05-27 Show GitHub Exploit DB Packet Storm
247787 4.3 警告 4shared - Starsgames Control Panel の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2458 2012-06-26 16:02 2008-05-27 Show GitHub Exploit DB Packet Storm
247788 7.5 危険 bitmixsoft - PHP-Jokesite の jokes_category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2457 2012-06-26 16:02 2008-05-27 Show GitHub Exploit DB Packet Storm
247789 7.5 危険 comicshout - ComicShout の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2456 2012-06-26 16:02 2008-05-27 Show GitHub Exploit DB Packet Storm
247790 7.5 危険 e107coders - e107用 MacGuru BLOG Engine プラグインの comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2455 2012-06-26 16:02 2008-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197851 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25225 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197852 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25224 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197853 8.8 HIGH
Network 		wisc htcondor HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method. CWE-306
Missing Authentication for Critical Function 		CVE-2021-25312 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197854 9.9 CRITICAL
Network 		wisc htcondor condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by ro… CWE-22
Path Traversal 		CVE-2021-25311 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
197855 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs. CWE-79
Cross-site Scripting 		CVE-2021-25325 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197856 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp. CWE-79
Cross-site Scripting 		CVE-2021-25324 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197857 9.1 CRITICAL
Network 		misp misp The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-25323 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
197858 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. T… CWE-787
 Out-of-bounds Write 		CVE-2021-25178 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
197859 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, pot… CWE-843
Type Confusion 		CVE-2021-25177 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
197860 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash,… CWE-476
 NULL Pointer Dereference 		CVE-2021-25176 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm