Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252801	4.3	警告	シマンテック	-	Symantec pcAnywhere 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3479	2012-01-27 16:20	2012-01-22	Show	GitHub Exploit DB Packet Storm

252802	10	危険	シマンテック	-	Symantec pcAnywhere 製品における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2011-3478	2012-01-27 16:18	2012-01-22	Show	GitHub Exploit DB Packet Storm

252803	4.3	警告	Digium	-	Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0885	2012-01-27 15:44	2012-01-15	Show	GitHub Exploit DB Packet Storm

252804	4.3	警告	Google	-	Android の Bluetooth サービスにおける連絡先データを取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4276	2012-01-27 15:43	2011-10-28	Show	GitHub Exploit DB Packet Storm

252805	5.8	警告	Tencent	-	Android 用 Tencent QQPhoto における連絡先情報およびパスワードハッシュを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4867	2012-01-27 15:18	2012-01-25	Show	GitHub Exploit DB Packet Storm

252806	6.4	警告	Kaixin001	-	Android 用 Kaixin001 における連絡先情報および平文パスワードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-4866	2012-01-27 15:18	2012-01-25	Show	GitHub Exploit DB Packet Storm

252807	5.8	警告	Tencent	-	Android 用 Tencent WBlog および MicroBlogPad におけるドラフトメッセージおよび検索キーワードを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4865	2012-01-27 15:12	2012-01-25	Show	GitHub Exploit DB Packet Storm

252808	5.8	警告	Tencent	-	Android 用 Tencent MobileQQ におけるメッセージおよびフレンドリストを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4864	2012-01-27 15:10	2012-01-25	Show	GitHub Exploit DB Packet Storm

252809	5.8	警告	Tencent	-	Android 用 Tencent QQPimSecure における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4863	2012-01-27 15:08	2012-01-25	Show	GitHub Exploit DB Packet Storm

252810	5.8	警告	AnGuanJia	-	Android 用 AnGuanJia における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4773	2012-01-27 15:07	2012-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220771	8.2	HIGH Local	flatpak debian redhat	flatpak debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linux_server…	Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-8308	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

220772	5.5	MEDIUM Local	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnera…	-	CVE-2019-7819	2024-11-21 13:48	2023-09-11	Show	GitHub Exploit DB Packet Storm

220773	9.8	CRITICAL Network	nukeviet	nukeviet	modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).	CWE-89 SQL Injection	CVE-2019-7726	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

220774	9.8	CRITICAL Network	nukeviet	nukeviet	includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).	CWE-502 Deserialization of Untrusted Data	CVE-2019-7725	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

220775	8.8	HIGH Network	intelliants	subrion_cms	Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.	CWE-352 Origin Validation Error	CVE-2019-7357	2024-11-21 13:48	2020-11-11	Show	GitHub Exploit DB Packet Storm

220776	5.4	MEDIUM Network	intelliants	subrion	Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.	CWE-79 Cross-site Scripting	CVE-2019-7356	2024-11-21 13:48	2020-11-5	Show	GitHub Exploit DB Packet Storm

220777	6.1	MEDIUM Network	galileo_cms_project	galileo_cms	There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.e…	CWE-79 Cross-site Scripting	CVE-2019-7410	2024-11-21 13:48	2020-08-14	Show	GitHub Exploit DB Packet Storm

220778	5.4	MEDIUM Network	ifrn	sistema_unificado_de_administracao_publica	SUAP V2 allows XSS during the update of user information.	CWE-79 Cross-site Scripting	CVE-2019-7634	2024-11-21 13:48	2020-04-29	Show	GitHub Exploit DB Packet Storm

220779	8.8	HIGH Network	weberp	weberp	In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.	CWE-89 SQL Injection	CVE-2019-7755	2024-11-21 13:48	2020-03-31	Show	GitHub Exploit DB Packet Storm

220780	7.2	HIGH Network	gigabyte	app_center	An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Speci…	CWE-665 Improper Initialization	CVE-2019-7630	2024-11-21 13:48	2020-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed