Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248911 5 警告 blackdot - Imageview の fileview.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2425 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248912 7.5 危険 burak yilmaz - Burak Yilmaz Blog の bry.asp における SQL インジェクションの脆弱性 - CVE-2007-2420 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248913 10 危険 Cerulean Studios - Cerulean Studios Trillian Pro の XMPP コンポーネント におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2418 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
248914 7.5 危険 e-annu - E-Annu の home.php における SQL インジェクションの脆弱性 - CVE-2007-2416 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
248915 4.3 警告 アップル - WebCore におけるクロスサイトスクリプティング攻撃を誘発する脆弱性 - CVE-2007-2410 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248916 4.3 警告 アップル - WebCore における重要な情報を取得される脆弱性 - CVE-2007-2409 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248917 6.8 警告 アップル - Apple Safari の WebKit における Java アプレットを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-2408 2012-06-26 15:46 2007-08-3 Show GitHub Exploit DB Packet Storm
248918 6.8 警告 アップル - Quartz Composer における任意のコードを実行される脆弱性 - CVE-2007-2406 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248919 6.8 警告 アップル - PDFKit の Preview における整数アンダーフローの脆弱性 - CVE-2007-2405 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
248920 5 警告 アップル - CFNetwork における CRLF インジェクションの脆弱性 - CVE-2007-2404 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196611 9.8 CRITICAL
Network 		onlyoffice document_server A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remo… CWE-787
 Out-of-bounds Write 		CVE-2021-25832 2024-11-21 14:55 2021-03-2 Show GitHub Exploit DB Packet Storm
196612 9.8 CRITICAL
Network 		onlyoffice document_server A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using … NVD-CWE-noinfo
CVE-2021-25831 2024-11-21 14:55 2021-03-2 Show GitHub Exploit DB Packet Storm
196613 9.8 CRITICAL
Network 		onlyoffice document_server A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. U… NVD-CWE-noinfo
CVE-2021-25830 2024-11-21 14:55 2021-03-2 Show GitHub Exploit DB Packet Storm
196614 7.5 HIGH
Network 		onlyoffice document_server An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack th… NVD-CWE-noinfo
CVE-2021-25829 2024-11-21 14:55 2021-03-2 Show GitHub Exploit DB Packet Storm
196615 7.8 HIGH
Local 		collaboraoffice online "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and ref… CWE-269
 Improper Privilege Management 		CVE-2021-25630 2024-11-21 14:55 2021-02-24 Show GitHub Exploit DB Packet Storm
196616 8.8 HIGH
Network 		atlassian jira_server_for_slack An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template injection vulnerability. CWE-74
Injection 		CVE-2021-26068 2024-11-21 14:55 2021-02-23 Show GitHub Exploit DB Packet Storm
196617 9.8 CRITICAL
Network 		smarty
debian 		smarty
debian_linux 		Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring. CWE-94
Code Injection 		CVE-2021-26120 2024-11-21 14:55 2021-02-22 Show GitHub Exploit DB Packet Storm
196618 7.5 HIGH
Network 		smarty
debian 		smarty
debian_linux 		Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. NVD-CWE-noinfo
CVE-2021-26119 2024-11-21 14:55 2021-02-22 Show GitHub Exploit DB Packet Storm
196619 7.2 HIGH
Network 		baby_care_system_project baby_care_system An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-25780 2024-11-21 14:55 2021-02-18 Show GitHub Exploit DB Packet Storm
196620 9.8 CRITICAL
Network 		baby_care_system_project baby_care_system Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page. CWE-89
SQL Injection 		CVE-2021-25779 2024-11-21 14:55 2021-02-18 Show GitHub Exploit DB Packet Storm