Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230571	2.6	注意	サン・マイクロシステムズ	-	Sun Solaris の libnsl および TLI/XTI API ルーチンにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-4303	2012-12-20 18:02	2006-08-22	Show	GitHub Exploit DB Packet Storm

230572	4.3	警告	Tiki Software Community Association	-	TikiWiki の tiki-searchindex.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-4299	2012-12-20 18:02	2006-08-22	Show	GitHub Exploit DB Packet Storm

230573	5	警告	TWiki	-	TWiki の viewfile におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4294	2012-12-20 18:02	2006-08-20	Show	GitHub Exploit DB Packet Storm

230574	7.5	危険	solmetra	-	SOLMETRA SPAW Editor における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4283	2012-12-20 18:02	2006-08-22	Show	GitHub Exploit DB Packet Storm

230575	7.5	危険	xennobb	-	XennoBB の topic_post.php における SQL インジェクションの脆弱性	-	CVE-2006-4279	2012-12-20 18:02	2006-08-21	Show	GitHub Exploit DB Packet Storm

230576	7.5	危険	sportsphool	-	SportsPHool の includes/layout/plain.footer.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4278	2012-12-20 18:02	2006-08-21	Show	GitHub Exploit DB Packet Storm

230577	9	危険	symantec veritas	-	Symantec Veritas NetBackup PureDisk Remote Office Edition における認証を回避される脆弱性	-	CVE-2006-4228	2012-12-20 18:02	2006-08-16	Show	GitHub Exploit DB Packet Storm

230578	4.3	警告	VWar	-	VWar の calendar.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4224	2012-12-20 18:02	2006-08-18	Show	GitHub Exploit DB Packet Storm

230579	7.5	危険	Zen Cart	-	Zen Cart におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4218	2012-12-20 18:02	2006-08-17	Show	GitHub Exploit DB Packet Storm

230580	7.5	危険	webinsta	-	WEBInsta CMS の modules/usersonline/users.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4217	2012-12-20 18:02	2006-08-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211471	6.5	MEDIUM Network	gitlab debian	gitlab debian_linux	GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.	CWE-862 Missing Authorization	CVE-2020-10955	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211472	7.5	HIGH Network	gitlab	gitlab	GitLab through 12.9 is affected by a potential DoS in repository archive download.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10954	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211473	7.5	HIGH Network	gitlab	gitlab	In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.	CWE-22 Path Traversal	CVE-2020-10953	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211474	6.5	MEDIUM Network	gitlab	gitlab	GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.	NVD-CWE-noinfo	CVE-2020-10952	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211475	8.8	HIGH Network	custom_searchable_data_entry_system_project	custom_searchable_data_entry_system	The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.	CWE-89 SQL Injection	CVE-2020-10817	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211476	9.1	CRITICAL Network	osmand	osmand	Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.	CWE-611 XXE	CVE-2020-10993	2024-11-21 13:56	2020-03-27	Show	GitHub Exploit DB Packet Storm

211477	9.8	CRITICAL Network	azkaban_project	azkaban	Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java.	CWE-611 XXE	CVE-2020-10992	2024-11-21 13:56	2020-03-27	Show	GitHub Exploit DB Packet Storm

211478	9.8	CRITICAL Network	mulesoft	aplkit	Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java	CWE-611 XXE	CVE-2020-10991	2024-11-21 13:56	2020-03-27	Show	GitHub Exploit DB Packet Storm

211479	9.8	CRITICAL Network	accenture	mercury	An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component.	CWE-611 XXE	CVE-2020-10990	2024-11-21 13:56	2020-03-27	Show	GitHub Exploit DB Packet Storm

211480	9.8	CRITICAL Network	draytek	vigor300b_firmware vigor3900_firmware vigor2960_firmware	A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request.	CWE-787 Out-of-bounds Write	CVE-2020-10828	2024-11-21 13:56	2020-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed