Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248271 7.5 危険 dazzlindonna - PostEcards の sendcard.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5559 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
248272 4.3 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2008-5558 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
248273 9.3 危険 ESET
マイクロソフト
- ESet NOD32 Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5534 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248274 9.3 危険 フォーティネット
マイクロソフト
- Fortinet Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5531 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248275 9.3 危険 マイクロソフト
AVG Technologies
- Ewido Security Suite における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5530 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248276 9.3 危険 マイクロソフト
アラジン
- Aladdin eSafe における HTML 文書のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5528 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248277 9.3 危険 ESET
マイクロソフト
- ESET Smart Security における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5527 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248278 9.3 危険 マイクロソフト
Doctor Web
- DrWeb Anti-virus における HTML 文書のマルウェアの検知が回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5526 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248279 9.3 危険 マイクロソフト
ClamAV
- ClamAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5525 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248280 9.3 危険 マイクロソフト
AVAST Software s.r.o.
- avast! antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5523 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200731 6.1 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2021-20765 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200732 5.3 MEDIUM
Network
cybozu garoon Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files. CWE-20
 Improper Input Validation 
CVE-2021-20764 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200733 4.3 MEDIUM
Network
cybozu garoon Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege. NVD-CWE-Other
CVE-2021-20763 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200734 4.3 MEDIUM
Network
cybozu garoon Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege. CWE-20
 Improper Input Validation 
CVE-2021-20762 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200735 2.7 LOW
Network
cybozu garoon Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privile… CWE-20
 Improper Input Validation 
CVE-2021-20761 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200736 4.3 MEDIUM
Network
cybozu garoon Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege. CWE-20
 Improper Input Validation 
CVE-2021-20760 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200737 4.3 MEDIUM
Network
cybozu garoon Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. NVD-CWE-Other
CVE-2021-20759 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200738 8.0 HIGH
Network
cybozu garoon Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitra… CWE-352
 Origin Validation Error
CVE-2021-20758 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200739 4.3 MEDIUM
Network
cybozu garoon Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. NVD-CWE-Other
CVE-2021-20757 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200740 4.3 MEDIUM
Network
cybozu garoon Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege. NVD-CWE-Other
CVE-2021-20756 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm