Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249131 9.3 危険 CA Technologies - CA eTrust Antivirus WebScan における詳細不明な脆弱性 - CVE-2006-3977 2012-06-26 15:37 2006-08-4 Show GitHub Exploit DB Packet Storm
249132 9.3 危険 CA Technologies - CA eTrust Antivirus WebScan における任意のファイルをインストールされる脆弱性 - CVE-2006-3976 2012-06-26 15:37 2006-08-4 Show GitHub Exploit DB Packet Storm
249133 7.5 危険 CA Technologies - CA eTrust Antivirus WebScan における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2006-3975 2012-06-26 15:37 2006-08-4 Show GitHub Exploit DB Packet Storm
249134 7.5 危険 php layers menu
carlos sanchez valle		 - MyNewsGroups 用の PHP Layers Menu パッケージ の /lib/tree/layersmenu.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3966 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
249135 10 危険 DELL EMC (旧 EMC Corporation) - EMC NetWorker の Management Console サーバにおける任意のコマンドを実行される脆弱性 - CVE-2006-3892 2012-06-26 15:37 2007-03-2 Show GitHub Exploit DB Packet Storm
249136 5 警告 banex - Banex PHP MySQL Banner Exchange におけるデータベースのユーザ名およびパスワード等の重要な情報を取得される脆弱性 - CVE-2006-3965 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
249137 7.5 危険 banex - Banex PHP MySQL Banner Exchange の members.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3964 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
249138 7.5 危険 banex - Banex PHP MySQL Banner Exchange における SQL インジェクションの脆弱性 - CVE-2006-3963 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
249139 7.5 危険 bosdev - BosDev BosDates の payment.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3957 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
249140 7.5 危険 EFS Software - EFS Software Easy File Sharing FTP Server におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3952 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196591 9.8 CRITICAL
Network 		markdown_to_pdf_project markdown_to_pdf The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. NVD-CWE-noinfo
CVE-2021-23639 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196592 9.8 CRITICAL
Network 		c2fo comb All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23561 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196593 9.1 CRITICAL
Network 		h2database h2 The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data fr… CWE-611
XXE 		CVE-2021-23463 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
196594 7.2 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
videojet_decoder_7513_firmware
videojet_decoder_8000_firmware 		A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BV… CWE-78
OS Command  		CVE-2021-23862 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196595 6.5 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.… NVD-CWE-Other
CVE-2021-23861 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196596 6.1 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header tha… CWE-79
Cross-site Scripting 		CVE-2021-23860 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196597 7.5 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
access_easy_controller_firmware
video_recording_manager_exporter
building_integration_system
access_professional_edition 		An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-23859 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
196598 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway
sd-wan 		An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface acce… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22956 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
196599 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway 		A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to caus… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22955 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
196600 9.8 CRITICAL
Network 		ajaxpro.2_project ajaxpro.2 All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23758 2024-11-21 14:51 2021-12-4 Show GitHub Exploit DB Packet Storm