Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248421 7.5 危険 dominion web - DWdirectory における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6392 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
248422 2.1 注意 GNOME Project - GNOME screensaver の通知機能におけるクリップボードの内容などを読まれる脆弱性 CWE-DesignError
CVE-2007-6389 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
248423 7.5 危険 BEAシステムズ - BEA WebLogic Mobility Server の Image Converter 機能におけるアプリケーションファイルおよびリソースアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6384 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248424 5.5 警告 chandler project - Cosmo のDAV コンポーネントにおける他ユーザのホームコレクションの任意のリソースを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6383 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248425 7.5 危険 e-xoops - exoops における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6380 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248426 5 警告 badblue - BadBlue における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2007-6379 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248427 7.5 危険 badblue - BadBlue の upload.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6378 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248428 7.5 危険 badblue - BadBlue の ext.dll の PassThru 機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6377 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248429 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の autohtml.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6376 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248430 7.5 危険 Bitweaver - Bitweaver における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6375 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201051 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. NVD-CWE-Other
CVE-2021-21130 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201052 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. NVD-CWE-Other
CVE-2021-21129 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201053 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
 Out-of-bounds Write 		CVE-2021-21128 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201054 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension. NVD-CWE-Other
CVE-2021-21127 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201055 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. CWE-20
 Improper Input Validation  		CVE-2021-21126 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201056 8.1 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. CWE-59
Link Following 		CVE-2021-21125 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201057 9.6 CRITICAL
Network 		google
microsoft 		chrome
edge_chromium 		Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-21124 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201058 6.5 MEDIUM
Network 		google
microsoft 		chrome
edge_chromium 		Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2021-21123 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201059 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-21122 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm
201060 9.6 CRITICAL
Network 		google
microsoft 		chrome
edge_chromium 		Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-21121 2024-11-21 14:47 2021-02-9 Show GitHub Exploit DB Packet Storm