Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248951 7.5 危険 Emophp Programming - EMO Realty Manager の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2265 2012-06-26 16:02 2008-05-16 Show GitHub Exploit DB Packet Storm
248952 7.5 危険 cmsnx - Automated Link Exchange Portal の linking.page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2263 2012-06-26 16:02 2008-05-16 Show GitHub Exploit DB Packet Storm
248953 4.6 警告 afuse - afuse の expand_template 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2232 2012-06-26 16:02 2008-07-17 Show GitHub Exploit DB Packet Storm
248954 9.3 危険 cyberfolio - Cyberfolio における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2228 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248955 7.5 危険 gamecms - gameCMS Lite の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2225 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248956 7.5 危険 buyscripts - vShare YouTube Clone の group_posts.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2223 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248957 7.5 危険 eqdkp - EQdkp の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2222 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248958 4.3 警告 c-news.fr - C-News.fr C-News の install.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2219 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248959 10 危険 castle rock - Castle Rock Computing SNMPc の Network Manager におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2214 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
248960 6.5 警告 deluxebb - DeluxeBB の admincp.php における任意の PHP コードを logs/cp.php に挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2195 2012-06-26 16:02 2008-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196131 6.1 MEDIUM
Network 		emlog emlog Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. CWE-79
Cross-site Scripting 		CVE-2021-30227 2024-11-21 15:03 2021-04-30 Show GitHub Exploit DB Packet Storm
196132 8.8 HIGH
Network 		rukovoditel rukovoditel Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials. CWE-352
 Origin Validation Error 		CVE-2021-30224 2024-11-21 15:03 2021-04-30 Show GitHub Exploit DB Packet Storm
196133 5.5 MEDIUM
Local 		samurai_project samurai samurai 1.2 has a NULL pointer dereference in printstatus() function in build.c via a crafted build file. CWE-476
 NULL Pointer Dereference 		CVE-2021-30219 2024-11-21 15:03 2021-04-30 Show GitHub Exploit DB Packet Storm
196134 5.5 MEDIUM
Local 		samurai_project samurai samurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file. CWE-476
 NULL Pointer Dereference 		CVE-2021-30218 2024-11-21 15:03 2021-04-30 Show GitHub Exploit DB Packet Storm
196135 5.5 MEDIUM
Local 		md4c_project md4c md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document. CWE-908
 Use of Uninitialized Resource 		CVE-2021-30027 2024-11-21 15:03 2021-04-30 Show GitHub Exploit DB Packet Storm
196136 7.5 HIGH
Network 		meritlilin p2r8852e2_firmware
p2r8852e4_firmware
p2r6852e2_firmware
p2r6852e4_firmware
p2r6552e2_firmware
p2r6552e4_firmware
p2r6352ae2_firmware
p2r6352ae4_firmware
p2r3052ae2_firmware 		The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential. CWE-522
 Insufficiently Protected Credentials 		CVE-2021-30169 2024-11-21 15:03 2021-04-28 Show GitHub Exploit DB Packet Storm
196137 9.8 CRITICAL
Network 		meritlilin p2r8852e2_firmware
p2r8852e4_firmware
p2r6852e2_firmware
p2r6852e4_firmware
p2r6552e2_firmware
p2r6552e4_firmware
p2r6352ae2_firmware
p2r6352ae4_firmware
p2r3052ae2_firmware 		The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices. CWE-522
 Insufficiently Protected Credentials 		CVE-2021-30168 2024-11-21 15:03 2021-04-28 Show GitHub Exploit DB Packet Storm
196138 9.8 CRITICAL
Network 		meritlilin p2r8852e2_firmware
p2r8852e4_firmware
p2r6852e2_firmware
p2r6852e4_firmware
p2r6552e2_firmware
p2r6552e4_firmware
p2r6352ae2_firmware
p2r6352ae4_firmware
p2r3052ae2_firmware 		The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to cont… CWE-306
Missing Authentication for Critical Function 		CVE-2021-30167 2024-11-21 15:03 2021-04-28 Show GitHub Exploit DB Packet Storm
196139 7.2 HIGH
Network 		meritlilin p2r8852e2_firmware
p2r8852e4_firmware
p2r6852e2_firmware
p2r6852e4_firmware
p2r6552e2_firmware
p2r6552e4_firmware
p2r6352ae2_firmware
p2r6352ae4_firmware
p2r3052ae2_firmware 		The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after log… - CVE-2021-30166 2024-11-21 15:03 2021-04-28 Show GitHub Exploit DB Packet Storm
196140 9.8 CRITICAL
Network 		apache ofbiz Apache OFBiz has unsafe deserialization prior to 17.12.07 version CWE-502
 Deserialization of Untrusted Data 		CVE-2021-30128 2024-11-21 15:03 2021-04-28 Show GitHub Exploit DB Packet Storm