Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227641	7.5	危険	シックス・アパート株式会社	-	Movable Type の mt-upgrade.cgi における eval インジェクションおよび SQL インジェクションの脆弱性	CWE-287 不適切な認証	CVE-2013-0209	2013-01-24 14:48	2013-01-7	Show	GitHub Exploit DB Packet Storm

227642	7.5	危険	Nagios Enterprises, LLC The Icinga Project	-	Nagios Core の history.cgi におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-6096	2013-01-24 14:47	2013-01-12	Show	GitHub Exploit DB Packet Storm

227643	1.5	注意	シトリックス・システムズ Apache Software Foundation	-	Apache CloudStack および Citrix CloudPlatform における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-5616	2013-01-24 14:46	2013-01-9	Show	GitHub Exploit DB Packet Storm

227644	4.3	警告	Activision Publishing	-	iOS 用 Call of Duty Elite における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4918	2013-01-24 14:45	2013-01-22	Show	GitHub Exploit DB Packet Storm

227645	1.9	注意	Linux	-	Linux Kernel の KVM サブシステムにおけるサービス運用妨害 (カーネル OOPS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4461	2013-01-24 14:44	2012-12-3	Show	GitHub Exploit DB Packet Storm

227646	5	警告	Linux	-	Linux Kernel の Near Field Communication Controller Interface におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3364	2013-01-24 14:43	2012-07-16	Show	GitHub Exploit DB Packet Storm

227647	4.4	警告	Linux	-	Linux Kernel の Reliable Datagram Sockets プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-2372	2013-01-24 14:42	2013-01-22	Show	GitHub Exploit DB Packet Storm

227648	6.9	警告	Linux	-	Linux Kernel の KVM サブシステムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2137	2013-01-24 14:41	2012-07-25	Show	GitHub Exploit DB Packet Storm

227649	5.2	警告	Linux	-	Linux Kernel の macvtap デバイスドライバにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2119	2013-01-24 14:41	2012-07-16	Show	GitHub Exploit DB Packet Storm

227650	5	警告	マイクロソフト	-	Microsoft Internet Explorer におけるファイルの存在についての重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-6502	2013-01-24 14:40	2013-01-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220771	8.2	HIGH Local	flatpak debian redhat	flatpak debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linux_server…	Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-8308	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

220772	5.5	MEDIUM Local	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnera…	-	CVE-2019-7819	2024-11-21 13:48	2023-09-11	Show	GitHub Exploit DB Packet Storm

220773	9.8	CRITICAL Network	nukeviet	nukeviet	modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).	CWE-89 SQL Injection	CVE-2019-7726	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

220774	9.8	CRITICAL Network	nukeviet	nukeviet	includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).	CWE-502 Deserialization of Untrusted Data	CVE-2019-7725	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

220775	8.8	HIGH Network	intelliants	subrion_cms	Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.	CWE-352 Origin Validation Error	CVE-2019-7357	2024-11-21 13:48	2020-11-11	Show	GitHub Exploit DB Packet Storm

220776	5.4	MEDIUM Network	intelliants	subrion	Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.	CWE-79 Cross-site Scripting	CVE-2019-7356	2024-11-21 13:48	2020-11-5	Show	GitHub Exploit DB Packet Storm

220777	6.1	MEDIUM Network	galileo_cms_project	galileo_cms	There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.e…	CWE-79 Cross-site Scripting	CVE-2019-7410	2024-11-21 13:48	2020-08-14	Show	GitHub Exploit DB Packet Storm

220778	5.4	MEDIUM Network	ifrn	sistema_unificado_de_administracao_publica	SUAP V2 allows XSS during the update of user information.	CWE-79 Cross-site Scripting	CVE-2019-7634	2024-11-21 13:48	2020-04-29	Show	GitHub Exploit DB Packet Storm

220779	8.8	HIGH Network	weberp	weberp	In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.	CWE-89 SQL Injection	CVE-2019-7755	2024-11-21 13:48	2020-03-31	Show	GitHub Exploit DB Packet Storm

220780	7.2	HIGH Network	gigabyte	app_center	An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Speci…	CWE-665 Improper Initialization	CVE-2019-7630	2024-11-21 13:48	2020-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed