Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248621 8.5 危険 freeSSHd - freeSSHd の SFTP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2573 2012-06-26 16:02 2008-06-6 Show GitHub Exploit DB Packet Storm
248622 4.3 警告 fourtwosevenbb - 427BB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2561 2012-06-26 16:02 2008-06-6 Show GitHub Exploit DB Packet Storm
248623 7.5 危険 fourtwosevenbb - 427BB の showpost.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2560 2012-06-26 16:02 2008-06-6 Show GitHub Exploit DB Packet Storm
248624 7.5 危険 Borland Software Corporation - Borland Interbase における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-2559 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248625 5 警告 creloaded - CRE Loaded におけるクッキーを傍受される脆弱性 CWE-310
暗号の問題 		CVE-2008-2558 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248626 4.3 警告 creloaded - CRE Loaded におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2557 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248627 7.5 危険 easyway - EasyWay CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2555 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248628 7.5 危険 bp blog - BP Blog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2554 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248629 5 警告 Digium - Asterisk Addons の ooh323 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2543 2012-06-26 16:02 2008-06-5 Show GitHub Exploit DB Packet Storm
248630 7.5 危険 fkrauthan - Phoenix View CMS Pre Alpha2 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2535 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197041 5.5 MEDIUM
Local 		samsung health Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service. CWE-863
 Incorrect Authorization 		CVE-2021-25506 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197042 7.8 HIGH
Local 		samsung samsung_pass Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked. CWE-287
Improper Authentication 		CVE-2021-25505 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197043 4.0 MEDIUM
Local 		samsung group_sharing Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. NVD-CWE-Other
CVE-2021-25504 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197044 6.7 MEDIUM
Local 		google android Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution. CWE-20
 Improper Input Validation  		CVE-2021-25503 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197045 5.5 MEDIUM
Local 		google android A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2021-25502 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197046 3.3 LOW
Local 		google android An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers. NVD-CWE-Other
CVE-2021-25501 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197047 4.4 MEDIUM
Local 		google android A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. CWE-787
 Out-of-bounds Write 		CVE-2021-25500 2024-11-21 14:55 2021-11-5 Show GitHub Exploit DB Packet Storm
197048 4.3 MEDIUM
Network 		fortinet fortimanager An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other… NVD-CWE-Other
CVE-2021-26107 2024-11-21 14:55 2021-11-3 Show GitHub Exploit DB Packet Storm
197049 6.5 MEDIUM
Network 		publify_project publify In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only. CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2021-25973 2024-11-21 14:55 2021-11-2 Show GitHub Exploit DB Packet Storm
197050 6.1 MEDIUM
Network 		youphptube youphptube AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session c… CWE-79
Cross-site Scripting 		CVE-2021-25878 2024-11-21 14:55 2021-11-1 Show GitHub Exploit DB Packet Storm