Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229611	10	危険	website designs for less	-	Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性	-	CVE-2006-6859	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229612	7.5	危険	webtext	-	WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性	-	CVE-2006-6856	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229613	7.5	危険	shadowed works	-	Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6850	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229614	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6847	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229615	10	危険	phpBB	-	phpBB の特定のフォームにおける脆弱性	-	CVE-2006-6841	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229616	10	危険	phpBB	-	phpBB における脆弱性	-	CVE-2006-6840	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229617	10	危険	phpBB	-	phpBB における脆弱性	-	CVE-2006-6839	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229618	7.5	危険	rediff	-	Rediff Bol Downloader OCX コントロールにおける重要な情報 (ユーザ名およびパス名) を取得される脆弱性	-	CVE-2006-6838	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229619	6.8	警告	sergey oblomov	-	Total Commander 用の ISO プラグインの LoadTree などの関数におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-6837	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229620	7.5	危険	yrch	-	Yrch! の plugins/metasearch/plug.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6823	2012-12-20 18:02	2006-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210611	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a…	CWE-502 Deserialization of Untrusted Data	CVE-2020-11111	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210612	6.1	MEDIUM Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XS…	CWE-79 Cross-site Scripting	CVE-2020-11106	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210613	9.8	CRITICAL Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::share…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-11105	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210614	5.3	MEDIUM Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or he…	CWE-908 Use of Uninitialized Resource	CVE-2020-11104	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

210615	7.8	HIGH Local	phoenixcontact	portico_server_4_client portico_server_16_client portico_server_1_client	Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.	CWE-269 Improper Privilege Management	CVE-2020-10940	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210616	7.8	HIGH Local	phoenixcontact	pc_worx_srt	Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.	CWE-276 Incorrect Default Permissions	CVE-2020-10939	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210617	9.8	CRITICAL Network	gitlab	gitlab	GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10956	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210618	6.5	MEDIUM Network	gitlab debian	gitlab debian_linux	GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.	CWE-862 Missing Authorization	CVE-2020-10955	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210619	7.5	HIGH Network	gitlab	gitlab	GitLab through 12.9 is affected by a potential DoS in repository archive download.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10954	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

210620	7.5	HIGH Network	gitlab	gitlab	In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.	CWE-22 Path Traversal	CVE-2020-10953	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed