Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248791 7.5 危険 blue smiley organizer - Blue Smiley Organizer における SQL インジェクションの脆弱性 - CVE-2006-5237 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248792 7.5 危険 4homepages - 4images の search.php における SQL インジェクションの脆弱性 - CVE-2006-5236 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248793 7.5 危険 dimension of phpbb - phpBB の Dimension の includes/functions_kb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5235 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248794 7.8 危険 Grandstream Networks - Grandstream GXP-2000 VoIP Desktop Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5231 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248795 7.5 危険 freeforum - FreeForum の forum.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5230 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248796 7.5 危険 freenews - Prologin.fr Freenews の moteur/moteur.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5226 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248797 7.5 危険 aai-portal - AAIportal における SQL インジェクションの脆弱性 - CVE-2006-5225 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248798 7.5 危険 dimitri seitz - phpBB の dwingmods における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5224 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248799 7.5 危険 dimension of phpbb - Dimension of phpBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5222 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248800 7.5 危険 cahier de textes - Cahier de texte における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-5221 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197381 7.5 HIGH
Network 		vmware workspace_one_uem_console VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-22054 2024-11-21 14:49 2021-12-18 Show GitHub Exploit DB Packet Storm
197382 9.8 CRITICAL
Network 		abb omnicore_c30_firmware A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected S… CWE-306
Missing Authentication for Critical Function 		CVE-2021-22279 2024-11-21 14:49 2021-12-14 Show GitHub Exploit DB Packet Storm
197383 7.5 HIGH
Network 		anker eufy_homebase_2_firmware An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to passwo… CWE-287
Improper Authentication 		CVE-2021-21955 2024-11-21 14:49 2021-12-10 Show GitHub Exploit DB Packet Storm
197384 9.9 CRITICAL
Network 		anker eufy_homebase_2_firmware A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can le… CWE-78
OS Command  		CVE-2021-21954 2024-11-21 14:49 2021-12-10 Show GitHub Exploit DB Packet Storm
197385 7.3 HIGH
Local 		dreamreport remote_connector A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabiliti… NVD-CWE-Other
CVE-2021-21957 2024-11-21 14:49 2021-12-9 Show GitHub Exploit DB Packet Storm
197386 10.0 CRITICAL
Network 		anker eufy_homebase_2_firmware An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2021-21951 2024-11-21 14:49 2021-12-9 Show GitHub Exploit DB Packet Storm
197387 10.0 CRITICAL
Network 		anker eufy_homebase_2_firmware An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_respon… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2021-21950 2024-11-21 14:49 2021-12-9 Show GitHub Exploit DB Packet Storm
197388 7.5 HIGH
Network 		gitlab gitlab Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-22170 2024-11-21 14:49 2021-12-7 Show GitHub Exploit DB Packet Storm
197389 6.5 MEDIUM
Network 		vmware spring_advanced_message_queuing_protocol In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. Thi… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-22095 2024-11-21 14:49 2021-12-1 Show GitHub Exploit DB Packet Storm
197390 9.8 CRITICAL
Network 		vmware vcenter_server The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor with network access to port 443 on vCenter… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-22049 2024-11-21 14:49 2021-11-25 Show GitHub Exploit DB Packet Storm