Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229521	5.1	警告	PHPNUKE	-	PHP-Nuke の mainfile.php における SQL インジェクション攻撃を実行される脆弱性	-	CVE-2006-5525	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

229522	6.8	警告	phpList	-	phplist の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5524	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

229523	7.5	危険	rhode island secretary of state	-	Rhode Island OMFA における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5517	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

229524	4.3	警告	wikini	-	WikiNi の actions/usersettings.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5516	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

229525	7.5	危険	web group communication center	-	WGCC の quiz.php における SQL インジェクションの脆弱性	-	CVE-2006-5514	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

229526	4.3	警告	zwahlen informatik	-	Zwahlen Online Shop の article.htm におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5512	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

229527	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-5509	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

229528	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性	-	CVE-2006-5508	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

229529	7.5	危険	wiclear	-	WiClear における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5506	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

229530	4.3	警告	Simple Machines	-	SMF の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5504	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210611	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a…	CWE-502 Deserialization of Untrusted Data	CVE-2020-11111	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210612	6.1	MEDIUM Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XS…	CWE-79 Cross-site Scripting	CVE-2020-11106	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210613	9.8	CRITICAL Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::share…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-11105	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210614	5.3	MEDIUM Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or he…	CWE-908 Use of Uninitialized Resource	CVE-2020-11104	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210615	7.8	HIGH Local	phoenixcontact	portico_server_4_client portico_server_16_client portico_server_1_client	Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.	CWE-269 Improper Privilege Management	CVE-2020-10940	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210616	7.8	HIGH Local	phoenixcontact	pc_worx_srt	Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.	CWE-276 Incorrect Default Permissions	CVE-2020-10939	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210617	9.8	CRITICAL Network	gitlab	gitlab	GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10956	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210618	6.5	MEDIUM Network	gitlab debian	gitlab debian_linux	GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.	CWE-862 Missing Authorization	CVE-2020-10955	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210619	7.5	HIGH Network	gitlab	gitlab	GitLab through 12.9 is affected by a potential DoS in repository archive download.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10954	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210620	7.5	HIGH Network	gitlab	gitlab	In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.	CWE-22 Path Traversal	CVE-2020-10953	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed