Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230701	7.5	危険	mywebland	-	Webland MyBloggie における SQL インジェクションの脆弱性	-	CVE-2006-3905	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230702	6.8	警告	Etomite Project	-	Etomite CMS の manager/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-3904	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230703	5.8	警告	mywebland	-	myWebland MyBloggie における CRLF インジェクションの脆弱性	-	CVE-2006-3903	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230704	4.3	警告	phpfaber	-	phpFaber TopSites の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3902	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230705	7.5	危険	tumbleweed	-	Tumbleweed EMF におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3901	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230706	6.8	警告	tobias kloy	-	TP-Book の guestbook.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3900	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230707	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3899	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230708	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3898	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230709	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6 におけるスタックオーバフローの脆弱性	-	CVE-2006-3897	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230710	9.3	危険	winzip sky software	-	WinZip などで使用される Sky Software FileView ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3890	2012-12-20 18:02	2006-11-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211581	7.5	HIGH Network	avast	antivirus	An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avas…	NVD-CWE-noinfo	CVE-2020-10861	2024-11-21 13:56	2020-04-2	Show	GitHub Exploit DB Packet Storm

211582	7.5	HIGH Network	avast	antivirus	An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denial of Service of the Avast Service (AvastSvc.exe).	CWE-787 Out-of-bounds Write	CVE-2020-10860	2024-11-21 13:56	2020-04-2	Show	GitHub Exploit DB Packet Storm

211583	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server webcenter_portal ret…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).	CWE-502 Deserialization of Untrusted Data	CVE-2020-11113	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211584	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commo…	CWE-502 Deserialization of Untrusted Data	CVE-2020-11112	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211585	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a…	CWE-502 Deserialization of Untrusted Data	CVE-2020-11111	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211586	6.1	MEDIUM Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XS…	CWE-79 Cross-site Scripting	CVE-2020-11106	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211587	9.8	CRITICAL Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::share…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-11105	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211588	5.3	MEDIUM Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or he…	CWE-908 Use of Uninitialized Resource	CVE-2020-11104	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

211589	7.8	HIGH Local	phoenixcontact	portico_server_4_client portico_server_16_client portico_server_1_client	Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.	CWE-269 Improper Privilege Management	CVE-2020-10940	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

211590	7.8	HIGH Local	phoenixcontact	pc_worx_srt	Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.	CWE-276 Incorrect Default Permissions	CVE-2020-10939	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed