Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248721 4.3 警告 eqdkp - EQdkp の Key Tracker の Attunement におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3067 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248722 7.8 危険 Cactusoft International FZ-LLC & Cactusoft Ltd. - Cactushop におけるデータベースをダウンロードされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-3061 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248723 4.3 警告 codelib - Codelib Linker の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3055 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248724 4.3 警告 codelib - Codelib Linker の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3054 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248725 7.5 危険 calimero.cms - Calimero.CMS における Web セッションハイジャックの脆弱性 - CVE-2007-3053 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248726 7.5 危険 chameleon cms - chameleon cms におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-3050 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248727 4.3 警告 buttercup wfm - BWFM May 2007 の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3049 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248728 5 警告 Advanced Software Production Line - Advanced Software Production Line Vortex Library におけるバッファオーバーフローの脆弱性 - CVE-2007-3046 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
248729 5 警告 サン・マイクロシステムズ
ClamAV		 - ClamAV の libclamav/phishcheck.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3025 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
248730 2.1 注意 ClamAV - ClamAV の libclamav/others.c における重要な情報を読み取られる脆弱性 - CVE-2007-3024 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201061 7.8 HIGH
Local 		qualcomm ar8031_firmware
ar8035_firmware
csra6620_firmware
csra6640_firmware
csrb31024_firmware
fsm10055_firmware
fsm10056_firmware
mdm9150_firmware
mdm9205_firmware
mdm9628_firmwar… 		Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-1894 2024-11-21 14:45 2022-01-3 Show GitHub Exploit DB Packet Storm
201062 8.8 HIGH
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-20132 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
201063 8.4 HIGH
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file… CWE-22
Path Traversal 		CVE-2021-20134 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
201064 6.1 MEDIUM
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of t… CWE-22
Path Traversal 		CVE-2021-20133 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
201065 7.5 HIGH
Network 		sonicwall sma_100_firmware
sma_200_firmware
sma_210_firmware
sma_400_firmware
sma_410_firmware
sma_500v_firmware 		An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data. NVD-CWE-Other
CVE-2021-20050 2024-11-21 14:45 2021-12-23 Show GitHub Exploit DB Packet Storm
201066 7.5 HIGH
Network 		sonicwall sma_100_firmware
sma_200_firmware
sma_210_firmware
sma_400_firmware
sma_410_firmware
sma_500v_firmware 		A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.… CWE-203
 Information Exposure Through Discrepancy 		CVE-2021-20049 2024-11-21 14:45 2021-12-23 Show GitHub Exploit DB Packet Storm
201067 8.8 HIGH
Adjacent 		gryphonconnect gryphon_tower_firmware An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same ne… CWE-78
OS Command  		CVE-2021-20139 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm
201068 8.8 HIGH
Adjacent 		gryphonconnect gryphon_tower_firmware An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same networ… CWE-78
OS Command  		CVE-2021-20138 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm
201069 6.1 MEDIUM
Network 		gryphonconnect gryphon_tower_firmware A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by … CWE-79
Cross-site Scripting 		CVE-2021-20137 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm
201070 7.8 HIGH
Local 		sonicwall global_vpn_client SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code ex… CWE-427
 Uncontrolled Search Path Element 		CVE-2021-20047 2024-11-21 14:45 2021-12-8 Show GitHub Exploit DB Packet Storm