Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245331	6.8	警告	ac4p	-	ac4p Mobile におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6389	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245332	6.8	警告	Drupal	-	Drupal 用の CVS management/tracker におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6386	2012-06-26 15:38	2006-12-5	Show	GitHub Exploit DB Packet Storm

245333	7.5	危険	CA Technologies	-	複数の CA 製品の BrightStor Backup Discovery Service におけるバッファオーバーフローの脆弱性	-	CVE-2006-6379	2012-06-26 15:38	2006-12-8	Show	GitHub Exploit DB Packet Storm

245334	7.5	危険	awrate	-	awrate の login.php.inc における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6368	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245335	7.5	危険	duware	-	DUware DUdownload の detail.asp における SQL インジェクションの脆弱性	-	CVE-2006-6367	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245336	6.8	警告	Cerberus, LLC	-	Cerberus Helpdesk の includes/elements/spellcheck/spellwin.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6366	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245337	7.5	危険	duware	-	DUware DUpaypal の detail.asp における SQL インジェクションの脆弱性	-	CVE-2006-6365	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245338	6.8	警告	bluesocket	-	BlueSocket Secure Controller (BSC) の admin.pl におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6363	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245339	10	危険	bitflux	-	Bitflux Upload Progress Meter の uploadprogress_php_rfc1867_file 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6361	2012-06-26 15:38	2006-12-7	Show	GitHub Exploit DB Packet Storm

245340	10	危険	duware	-	DuWare DuClassmate の default.asp における SQL インジェクションの脆弱性	-	CVE-2006-6355	2012-06-26 15:38	2006-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219381	9.8	CRITICAL Network	pyyaml fedoraproject	pyyaml fedora	PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue e…	CWE-502 Deserialization of Untrusted Data	CVE-2019-20477	2024-11-21 13:38	2020-02-19	Show	GitHub Exploit DB Packet Storm

219382	4.3	MEDIUM Network	zohocorp	manageengine_remote_access_plus	An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (re…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-20474	2024-11-21 13:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

219383	7.8	HIGH Local	goverlan	client_agent reach_console reach_server	Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escal…	CWE-426 Untrusted Search Path	CVE-2019-20456	2024-11-21 13:38	2020-02-17	Show	GitHub Exploit DB Packet Storm

219384	5.9	MEDIUM Network	globalpayments	php_sdk	Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.	CWE-295 Improper Certificate Validation	CVE-2019-20455	2024-11-21 13:38	2020-02-15	Show	GitHub Exploit DB Packet Storm

219385	7.5	HIGH Network	pcre fedoraproject splunk	pcre2 fedora universal_forwarder	An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrust…	CWE-125 Out-of-bounds Read	CVE-2019-20454	2024-11-21 13:38	2020-02-14	Show	GitHub Exploit DB Packet Storm

219386	4.7	MEDIUM Network	atlassian	jira jira_server jira_data_center	The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, from version 6.0.0 before version 6.0.12,…	CWE-352 Origin Validation Error	CVE-2019-20100	2024-11-21 13:38	2020-02-12	Show	GitHub Exploit DB Packet Storm

219387	4.3	MEDIUM Network	atlassian	jira_server jira_data_center	The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tr…	CWE-352 Origin Validation Error	CVE-2019-20099	2024-11-21 13:38	2020-02-12	Show	GitHub Exploit DB Packet Storm

219388	4.3	MEDIUM Network	atlassian	jira_server jira_data_center	The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by t…	CWE-352 Origin Validation Error	CVE-2019-20098	2024-11-21 13:38	2020-02-12	Show	GitHub Exploit DB Packet Storm

219389	9.8	CRITICAL Network	samsung	prismview_player_11 prismview_system_9	The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authenticati…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-20451	2024-11-21 13:38	2020-02-11	Show	GitHub Exploit DB Packet Storm

219390	7.8	HIGH Local	atlassian	confluence confluence_server	The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to writ…	CWE-427 Uncontrolled Search Path Element	CVE-2019-20406	2024-11-21 13:38	2020-02-6	Show	GitHub Exploit DB Packet Storm