Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132631	5.4	警告 Network	gitea project	gitea	Gitea におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-28378	2021-11-22 17:57	2021-03-6	Show	GitHub Exploit DB Packet Storm

132632	7.8	重要 Local	Linux Fedora Project	Linux Kernel Fedora	Linux Kernel における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2021-28375	2021-11-22 17:57	2021-03-10	Show	GitHub Exploit DB Packet Storm

132633	7.5	重要 Network	Tiny Tiny RSS	Tiny Tiny RSS	Tiny Tiny RSS における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-28373	2021-11-22 17:57	2021-03-11	Show	GitHub Exploit DB Packet Storm

132634	7.5	重要 Network	Debian	courier-authlib Debian GNU/Linux	Debian courier-authlib パッケージにおける重要な情報の平文保存に関する脆弱性	CWE-312 重要な情報の平文保存	CVE-2021-28374	2021-11-22 17:57	2021-03-8	Show	GitHub Exploit DB Packet Storm

132635	7.5	重要 Network	SPDK	Storage Performance Development Kit	Storage Performance Development Kit における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-28361	2021-11-22 17:57	2021-03-11	Show	GitHub Exploit DB Packet Storm

132636	8.8	重要 Network	Zoho Corporation	ManageEngine ServiceDesk Plus	Zoho ManageEngine ServiceDesk Plus における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2020-35682	2021-11-22 17:57	2020-12-18	Show	GitHub Exploit DB Packet Storm

132637	6.1	警告 Network	Eclipse Foundation	Theia	Eclipse Theia における信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2021-28162	2021-11-22 17:57	2021-03-12	Show	GitHub Exploit DB Packet Storm

132638	6.1	警告 Network	Eclipse Foundation	Theia	Eclipse Theia におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-28161	2021-11-22 17:57	2021-03-12	Show	GitHub Exploit DB Packet Storm

132639	7.5	重要 Network	is-svg project	is-svg	Node.js 用 is-svg パッケージにおける脆弱性	CWE-Other その他	CVE-2021-28092	2021-11-22 17:57	2021-03-11	Show	GitHub Exploit DB Packet Storm

132640	7.8	重要 Local	LibTIFF Debian	LibTIFF Debian GNU/Linux	libtiff における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2020-35523	2021-11-22 17:55	2020-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357921	-	spid	spid	PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.	NVD-CWE-Other	CVE-2005-2198	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357922	-	skrypty	ppa_gallery	PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.	NVD-CWE-Other	CVE-2005-2199	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357923	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.	NVD-CWE-Other	CVE-2005-2200	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357924	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or acc…	NVD-CWE-Other	CVE-2005-2201	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357925	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to injec…	NVD-CWE-Other	CVE-2005-2202	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357926	-	phpwishlist	phpwishlist	login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.	NVD-CWE-Other	CVE-2005-2203	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357927	-	pngren	pngren	The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.	NVD-CWE-Other	CVE-2005-2205	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357928	-	elemental_software	cartwiz	Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp,…	NVD-CWE-Other	CVE-2005-2206	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357929	-	elemental_software	cartwiz	Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.	NVD-CWE-Other	CVE-2005-2207	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

357930	-	privashare	privashare	PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.	NVD-CWE-Other	CVE-2005-2208	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed