Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229301 6.5 警告 tftgallery - TFT-Gallery における admin/index.php を使用する任意の .php ファイルをアップロードされる脆弱性 - CVE-2006-6347 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229302 10 危険 SAP - SAP IGS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6346 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229303 5 警告 Xerox - Xerox WorkCentre および WorkCentre Pro における電子メールメッセージの署名を変更される脆弱性 - CVE-2006-6431 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229304 7.8 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web services における重要な情報を取得される脆弱性 - CVE-2006-6430 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229305 5 警告 Xerox - Xerox WorkCentre などにおける特定の設定内容を変更される脆弱性 - CVE-2006-6429 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229306 7.5 危険 Xerox - Xerox WorkCentre などにおけるアクセス権を取得される脆弱性 - CVE-2006-6428 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229307 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web User Interface における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2006-6427 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229308 6.8 警告 thinkedit - ThinkEdit の design/thinkedit/render.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6426 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229309 6 警告 phpBB - phpBB のプライベートメッセージボックス実装 (privmsg.php) におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6421 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229310 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6420 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198151 9.8 CRITICAL
Network
omniauth omniauth lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value. CWE-116
 Improper Encoding or Escaping of Output
CVE-2020-36599 2024-11-21 14:29 2022-08-19 Show GitHub Exploit DB Packet Storm
198152 5.4 MEDIUM
Network
atlassian confluence_server
confluence_data_center
The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to… CWE-79
Cross-site Scripting
CVE-2020-36290 2024-11-21 14:29 2022-07-26 Show GitHub Exploit DB Packet Storm
198153 5.1 MEDIUM
Local
linux linux_kernel A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. CWE-362
CWE-476
Race Condition
 NULL Pointer Dereference
CVE-2020-36558 2024-11-21 14:29 2022-07-21 Show GitHub Exploit DB Packet Storm
198154 5.1 MEDIUM
Local
linux linux_kernel A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-36557 2024-11-21 14:29 2022-07-21 Show GitHub Exploit DB Packet Storm
198155 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(food_type) field to /dashboard/menu-list.php. CWE-79
Cross-site Scripting
CVE-2020-36553 2024-11-21 14:29 2022-07-15 Show GitHub Exploit DB Packet Storm
198156 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made field to /dashboard/menu-list.php. CWE-79
Cross-site Scripting
CVE-2020-36552 2024-11-21 14:29 2022-07-15 Show GitHub Exploit DB Packet Storm
198157 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Name field to /dashboard/menu-list.php. CWE-79
Cross-site Scripting
CVE-2020-36551 2024-11-21 14:29 2022-07-15 Show GitHub Exploit DB Packet Storm
198158 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table Name field to /dashboard/table-list.php. CWE-79
Cross-site Scripting
CVE-2020-36550 2024-11-21 14:29 2022-07-15 Show GitHub Exploit DB Packet Storm
198159 7.8 HIGH
Local
ge voluson_s8_firmware A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the l… NVD-CWE-noinfo
CVE-2020-36549 2024-11-21 14:29 2022-06-17 Show GitHub Exploit DB Packet Storm
198160 7.8 HIGH
Local
ge voluson_s8_firmware A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elev… CWE-287
Improper Authentication
CVE-2020-36548 2024-11-21 14:29 2022-06-17 Show GitHub Exploit DB Packet Storm