Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248591 6.8 警告 futurenuke - PHP-Nuke Platinum の modules/Forums/favorites.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5676 2012-06-26 15:54 2007-10-24 Show GitHub Exploit DB Packet Storm
248592 4.3 警告 Creative Digital Resources - Creative Digital Resources SocketMail の lostpwd.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5649 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248593 4.9 警告 マイクロソフト
almico		 - Alfredo Milani Comparetti SpeedFan の Speedfan.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2007-5634 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248594 7.2 危険 マイクロソフト
almico		 - Alfredo Milani Comparetti SpeedFan の Speedfan.sys における任意の 符号なしのドライバをロードされる脆弱性 CWE-DesignError
CVE-2007-5633 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248595 7.5 危険 bbsprocess - BBsProcesS BBPortalS の tnews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5630 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248596 4.3 警告 candypress - ShoppingTree CandyPress Store の admin/logon.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5629 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248597 2.1 注意 Bacula.org - Bacula の make_catalog_backup におけるパスワードを取得される脆弱性 CWE-310
暗号の問題 		CVE-2007-5626 2012-06-26 15:54 2007-10-23 Show GitHub Exploit DB Packet Storm
248598 5 警告 3proxy - 3proxy の ftpprchild 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5622 2012-06-26 15:54 2007-10-29 Show GitHub Exploit DB Packet Storm
248599 3.5 注意 Drupal
Ubercart		 - Drupal 用の Token モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5621 2012-06-26 15:54 2007-10-17 Show GitHub Exploit DB Packet Storm
248600 6.8 警告 artmedic webdesign - Artmedic CMS の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5600 2012-06-26 15:54 2007-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200351 9.1 CRITICAL
Network 		jenkins nuget Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21658 2024-11-21 14:48 2021-05-26 Show GitHub Exploit DB Packet Storm
200352 8.8 HIGH
Network 		jenkins filesystem_trigger Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21657 2024-11-21 14:48 2021-05-26 Show GitHub Exploit DB Packet Storm
200353 8.8 HIGH
Local 		microsoft windows_10 Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploi… NVD-CWE-Other
CVE-2021-21552 2024-11-21 14:48 2021-05-22 Show GitHub Exploit DB Packet Storm
200354 8.8 HIGH
Network 		dell xtremio_management_server Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged … CWE-352
 Origin Validation Error 		CVE-2021-21549 2024-11-21 14:48 2021-05-22 Show GitHub Exploit DB Packet Storm
200355 4.9 MEDIUM
Network 		zte zxcdn The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensit… CWE-200
Information Exposure 		CVE-2021-21733 2024-11-21 14:48 2021-05-19 Show GitHub Exploit DB Packet Storm
200356 7.5 HIGH
Network 		zte axon_11_5g_firmware A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authoriza… NVD-CWE-Other
CVE-2021-21732 2024-11-21 14:48 2021-05-19 Show GitHub Exploit DB Packet Storm
200357 5.3 MEDIUM
Network 		sensiolabs
fedoraproject 		symfony
fedora 		Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling de… - CVE-2021-21424 2024-11-21 14:48 2021-05-14 Show GitHub Exploit DB Packet Storm
200358 7.1 HIGH
Network 		jenkins xcode_integration Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21656 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
200359 7.1 HIGH
Network 		jenkins p4 A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and pa… CWE-352
 Origin Validation Error 		CVE-2021-21655 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
200360 4.3 MEDIUM
Network 		jenkins p4 Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server… - CVE-2021-21654 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm