Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229621 5.1 警告 UBB Systems - Groupee UBB.threads における PHP コードを挿入される脆弱性 - CVE-2006-5137 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229622 7.5 危険 UBB Systems - Groupee UBB.threads の ubbt.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5136 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229623 7.5 危険 steve poulsen - GuildFTPd におけるバッファオーバーフローの脆弱性 - CVE-2006-5133 2012-12-20 18:02 2006-05-26 Show GitHub Exploit DB Packet Storm
229624 7.5 危険 phpmyagenda - phpMyAgenda における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5132 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229625 7.5 危険 salims softhouse - ph03y3nk JAF CMS の module/shout/jafshout.php における "" で囲まれたセクション内の任意のコードを実行される脆弱性 - CVE-2006-5131 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229626 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5130 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229627 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5129 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229628 7.5 危険 powerportal - John Himmelman PowerPortal の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5126 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229629 7.5 危険 phprojekt - Albrecht Guenther PHProjekt における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5123 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229630 7.5 危険 postnuke software foundation - PostNuke の Admin セクションにおける SQL インジェクションの脆弱性 - CVE-2006-5121 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197491 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5285 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197492 6.5 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ … CWE-863
 Incorrect Authorization
CVE-2020-5279 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197493 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5278 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197494 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5276 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197495 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5272 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197496 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5271 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197497 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts can be many, and vary from the theft of information and credentials to the redi… CWE-601
Open Redirect
CVE-2020-5270 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197498 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting
CVE-2020-5269 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197499 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5. CWE-79
Cross-site Scripting
CVE-2020-5265 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
197500 6.1 MEDIUM
Network
prestashop prestashop In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows anyone to execute arbitrary action. The problem is patched in the 1.7.6.5. CWE-79
Cross-site Scripting
CVE-2020-5264 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm