Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248931 | 10 | 危険 | andys chat | - | Andys Chat の register.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-7036 | 2012-06-26 15:38 | 2007-02-22 | Show | GitHub Exploit DB Packet Storm |
| 248932 | 6.8 | 警告 | avatic | - | Aardvark Topsites PHP の sources/join.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-7026 | 2012-06-26 15:38 | 2007-02-22 | Show | GitHub Exploit DB Packet Storm |
| 248933 | 4.3 | 警告 | fx-app | - | fx-APP におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-7023 | 2012-06-26 15:38 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 248934 | 10 | 危険 | fx-app | - | fx-APP の Tools モジュールにおける Web ページのコンテンツを不正確に表示する脆弱性 | - | CVE-2006-7022 | 2012-06-26 15:38 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 248935 | 7.8 | 危険 | arkoon | - | Arkoon FAST360 UTM の DNS モジュールにおけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2006-7054 | 2012-06-26 15:38 | 2006-05-29 | Show | GitHub Exploit DB Packet Storm |
| 248936 | 7.5 | 危険 | arkoon | - | Arkoon FAST360 UTM における IDPS HTTP モジュール内の署名を回避される脆弱性 | - | CVE-2006-7053 | 2012-06-26 15:38 | 2006-03-31 | Show | GitHub Exploit DB Packet Storm |
| 248937 | 7.5 | 危険 | bloggit | - | BloggIT の admin.php における権限を取得される脆弱性 | - | CVE-2006-7014 | 2012-06-26 15:38 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 248938 | 7.5 | 危険 | fusionphp | - | Fusion Polls の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-7003 | 2012-06-26 15:38 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 248939 | 7.5 | 危険 | dev | - | Neuron Blog の pages/addcomment2.php における SQL インジェクションの脆弱性 | - | CVE-2006-6993 | 2012-06-26 15:38 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 248940 | 7.8 | 危険 | gosurf browser | - | GoSuRF Browser における他のドメインから制限された情報へアクセスされる脆弱性 | - | CVE-2006-6992 | 2012-06-26 15:38 | 2007-02-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196901 | 8.8 |
HIGH
Network |
f5 | big-ip_advanced_firewall_manager | On BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a SQL injection vulnerability exists in an undisclosed … |
CWE-89
SQL Injection |
CVE-2021-23040 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196902 | 5.3 |
MEDIUM
Network |
f5 | big-ip_access_policy_manager | On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol (OCSP) verifi… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2021-23047 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196903 | 6.5 |
MEDIUM
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that al… |
CWE-22
Path Traversal |
CVE-2021-23043 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196904 | 7.5 |
HIGH
Network |
f5 |
big-ip_application_acceleration_manager big-ip_local_traffic_manager big-ip_advanced_web_application_firewall big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_secur… |
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclos… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2021-23042 | 2024-11-21 14:51 | 2021-09-15 | Show | GitHub Exploit DB Packet Storm |
| 196905 | 6.1 |
MEDIUM
Network |
f5 |
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_domain_name_system
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists…
|
CWE-79
|
Cross-site Scripting
CVE-2021-23041
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196906 | 6.1 |
MEDIUM
Network |
f5 | big-ip_access_policy_manager | On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenti… |
CWE-601
Open Redirect |
CVE-2021-23052 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196907 | 5.3 |
MEDIUM
Network |
f5 |
big-ip_advanced_web_application_firewall big-ip_application_security_manager |
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF or BIG-IP ASM is enabled on a virtual server and th… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2021-23053 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196908 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_acceleration_manager big-ip_application_secur… |
On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed reque… |
NVD-CWE-noinfo
|
CVE-2021-23051 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196909 | 7.5 |
HIGH
Network |
f5 |
big-ip_application_security_manager big-ip_advanced_web_application_firewall nginx_app_protect |
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery (CSRF)-enabled poli… |
NVD-CWE-noinfo
|
CVE-2021-23050 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |
| 196910 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_accelerat… |
On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Manag… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2021-23049 | 2024-11-21 14:51 | 2021-09-14 | Show | GitHub Exploit DB Packet Storm |