Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245381	7.5	危険	enthrallweb	-	Enthrallweb eClassifieds における SQL インジェクションの脆弱性	-	CVE-2006-6208	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245382	6.8	警告	enthrallweb	-	Enthrallweb eHomes の result.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6205	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245383	7.5	危険	enthrallweb	-	Enthrallweb eHomes における SQL インジェクションの脆弱性	-	CVE-2006-6204	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245384	7.5	危険	Borland Software Corporation revilloc	-	RevilloC MailServer などの製品で使用される Borland idsql32.dll におけるヒープベースのバッファオーバーフローの脆弱性	-	CVE-2006-6201	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245385	7.5	危険	francisco burzi	-	Francisco Burzi PHP-Nuke の News モジュールにおける SQL インジェクションの脆弱性	-	CVE-2006-6200	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245386	7.5	危険	blazevideo	-	BlazeVideo BlazeDVD Standard および Professional におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6199	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245387	6	警告	cPanel	-	cPanel WHM におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6198	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245388	6.8	警告	b2evolution	-	b2evolution におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6197	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245389	6.8	警告	fixit knowledge solutions	-	Fixit iDMS Pro Image Gallery の search 機能におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6196	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

245390	7.5	危険	fixit knowledge solutions	-	Fixit iDMS Pro Image Gallery における SQL インジェクションの脆弱性	-	CVE-2006-6195	2012-06-26 15:38	2006-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219591	4.8	MEDIUM Network	fooplugins	foogallery	The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.	CWE-79 Cross-site Scripting	CVE-2019-20182	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219592	4.8	MEDIUM Network	getawesomesupport	awesome_support	The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.	CWE-79 Cross-site Scripting	CVE-2019-20181	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219593	8.8	HIGH Network	soplanning	soplanning	SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.	CWE-89 SQL Injection	CVE-2019-20179	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219594	6.5	MEDIUM Network	peel	peel_shopping	Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.	CWE-352 Origin Validation Error	CVE-2019-20178	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219595	5.3	MEDIUM Network	f5 apple canonical opensuse netapp	nginx xcode ubuntu_linux leap cloud_backup	NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is…	CWE-444 HTTP Request Smuggling	CVE-2019-20372	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219596	6.8	MEDIUM Network	tablepress	tablepress	The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application tha…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-20180	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219597	8.8	HIGH Network	artica	pandora_fms	netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?ope…	CWE-78 OS Command	CVE-2019-20224	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219598	9.1	CRITICAL Network	freedesktop debian canonical opensuse	libbsd debian_linux ubuntu_linux leap	nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).	CWE-125 Out-of-bounds Read	CVE-2019-20367	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm

219599	6.1	MEDIUM Network	igniterealtime	openfire	An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.	CWE-79 Cross-site Scripting	CVE-2019-20366	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm

219600	6.1	MEDIUM Network	igniterealtime	openfire	An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.	CWE-79 Cross-site Scripting	CVE-2019-20365	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed