Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229091 5 警告 web-app.net - web-app.net WebAPP の cgi-lib/user-lib/search.pl における内部のフォーラム投稿を読まれる脆弱性 - CVE-2006-7188 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
229092 4.3 警告 web-app.net - web-app.net WebAPP の cgi-lib/user-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7187 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
229093 5 警告 web-app.net - web-app.net WebAPP の cgi-lib/subs.pl におけるリストファイルをオープンされる脆弱性 - CVE-2006-7186 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
229094 10 危険 phpBB - phpBB の Dimension モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7174 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
229095 10 危険 php-stats - PHP-Stats の admin.php における任意の PHP コードを実行される脆弱性 - CVE-2006-7173 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
229096 7.5 危険 php-stats - PHP-Stats の php-stats.recphp.php における SQL インジェクションの脆弱性 - CVE-2006-7172 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
229097 6.8 警告 PHP Outburst - UPB の includes/header_simple.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7169 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
229098 7.5 危険 prorat - ProRat Server におけるリモートログインに対する認証メカニズムを回避される脆弱性 - CVE-2006-7167 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
229099 1.9 注意 レッドハット - RHEL のカーネルにおける虚偽の成功ステータスを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-0004 2012-12-20 18:19 2006-07-21 Show GitHub Exploit DB Packet Storm
229100 6.5 警告 XWiki - XWiki の PreviewAction における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7223 2012-12-20 18:19 2006-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197131 3.1 LOW
Network 		simplesamlphp simplesamlphp SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for pages hosted by modules, has code to ide… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2020-5301 2024-11-21 14:33 2020-04-22 Show GitHub Exploit DB Packet Storm
197132 7.3 HIGH
Network 		sustainsys saml2 In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as b… CWE-287
Improper Authentication 		CVE-2020-5268 2024-11-21 14:33 2020-04-22 Show GitHub Exploit DB Packet Storm
197133 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5293 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197134 6.5 MEDIUM
Network 		prestashop prestashop "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5288 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197135 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5287 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197136 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5286 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197137 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5285 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197138 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ … CWE-863
 Incorrect Authorization 		CVE-2020-5279 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197139 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5278 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197140 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5276 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm