Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258701	4.3	警告	The Dojo Foundation Apache Software Foundation	-	Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6726	2011-06-10 09:51	2009-04-9	Show	GitHub Exploit DB Packet Storm

258702	4.3	警告	Apache Software Foundation	-	Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-1548	2011-06-10 09:50	2006-03-30	Show	GitHub Exploit DB Packet Storm

258703	7.8	危険	Apache Software Foundation	-	Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-1547	2011-06-10 09:50	2006-03-30	Show	GitHub Exploit DB Packet Storm

258704	4.3	警告	Apache Software Foundation レッドハット	-	Apache Struts におけるクロスサイトスクリプティングの脆弱性	-	CVE-2005-3745	2011-06-10 09:49	2005-11-22	Show	GitHub Exploit DB Packet Storm

258705	4.6	警告	Linux レッドハット	-	Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1581	2011-06-9 10:31	2011-05-18	Show	GitHub Exploit DB Packet Storm

258706	10	危険	Google レッドハット	-	Google Chrome におけるアドレスバーを偽装される脆弱性	CWE-DesignError	CVE-2010-3115	2011-06-9 10:30	2010-08-19	Show	GitHub Exploit DB Packet Storm

258707	10	危険	Google レッドハット	-	Google Chrome の text-editing 実装における脆弱性	CWE-399 リソース管理の問題	CVE-2010-3114	2011-06-9 10:30	2010-08-19	Show	GitHub Exploit DB Packet Storm

258708	10	危険	Google レッドハット	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-3113	2011-06-9 10:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

258709	10	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-3112	2011-06-9 10:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

258710	10	危険	Google	-	Google Chrome における脆弱性	CWE-noinfo 情報不足	CVE-2010-3111	2011-06-9 10:28	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247521	7.5	HIGH Network	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.…	CWE-125 Out-of-bounds Read	CVE-2018-19699	2024-11-21 12:58	2019-01-19	Show	GitHub Exploit DB Packet Storm

247522	9.8	CRITICAL Network	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.…	CWE-416 Use After Free	CVE-2018-19698	2024-11-21 12:58	2019-01-19	Show	GitHub Exploit DB Packet Storm

247523	9.1	CRITICAL Network	rhymix	rhymix	Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-19601	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247524	4.8	MEDIUM Network	rhymix	rhymix	Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.	CWE-79 Cross-site Scripting	CVE-2018-19600	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247525	8.8	HIGH Network	dolibarr	dolibarr_erp\/crm	SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.	CWE-89 SQL Injection	CVE-2018-19998	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247526	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to use…	CWE-79 Cross-site Scripting	CVE-2018-19995	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247527	8.8	HIGH Network	dolibarr	dolibarr_erp\/crm	An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.	CWE-89 SQL Injection	CVE-2018-19994	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247528	6.1	MEDIUM Network	dolibarr	dolibarr_erp\/crm	A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php.	CWE-79 Cross-site Scripting	CVE-2018-19993	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247529	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to adh…	CWE-79 Cross-site Scripting	CVE-2018-19992	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

247530	9.8	CRITICAL Network	minishare_project	minishare	Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-19862	2024-11-21 12:58	2019-01-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed