Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229681 7.5 危険 Qualiteam Software Limited - Qualiteam X-Cart の cmpi.php における任意のプログラム変数を上書きされる脆弱性 - CVE-2006-4904 2012-12-20 18:02 2006-09-20 Show GitHub Exploit DB Packet Storm
229682 10 危険 シマンテック - Symantec Veritas NetBackup の NetBackup bpcd デーモンにおける任意のコマンドを実行される脆弱性 - CVE-2006-4902 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
229683 7.5 危険 phpbb xs - phpBB XS の bb_usage_stats/includes/bb_usage_stats.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4893 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229684 7.5 危険 techno dreams - Techno Dreams FAQ Manager Package の faqview.asp における SQL インジェクションの脆弱性 - CVE-2006-4892 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229685 7.5 危険 techno dreams - Techno Dreams Articles & Papers Package の ArticlesTableview.asp における SQL インジェクションの脆弱性 - CVE-2006-4891 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229686 7.5 危険 unak - UNAK-CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4890 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229687 5.1 警告 telekorn - Telekorn SL における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4889 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229688 7.5 危険 shadowed portal - Shadowed Portal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4885 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229689 5 警告 phpquiz - Walter Beschmout PhpQuiz における重要な情報を取得される脆弱性 - CVE-2006-4865 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
229690 4.3 警告 roller weblogger - Roller WebLogger におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4856 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197611 5.4 MEDIUM
Network
atlassian crucible
fisheye
The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the re… CWE-79
Cross-site Scripting
CVE-2020-4013 2024-11-21 14:32 2020-06-1 Show GitHub Exploit DB Packet Storm
197612 3.3 LOW
Local
vmware workstation
fusion
esxi
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability i… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-3959 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197613 5.5 MEDIUM
Local
vmware workstation
fusion
esxi
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerabi… CWE-617
 Reachable Assertion
CVE-2020-3958 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197614 7.0 HIGH
Local
vmware fusion
horizon_client
remote_console
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-o… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3957 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197615 6.1 MEDIUM
Network
ibm business_process_manager
business_automation_workflow
IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An a… NVD-CWE-Other
CVE-2020-4490 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197616 7.0 HIGH
Local
ibm mq_for_hpe_nonstop IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. NVD-CWE-noinfo
CVE-2020-4352 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197617 5.4 MEDIUM
Network
ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun… CWE-79
Cross-site Scripting
CVE-2020-4306 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197618 2.7 LOW
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informat… CWE-209
Information Exposure Through an Error Message
CVE-2020-4248 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197619 5.4 MEDIUM
Network
ibm jazz_reporting_service IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f… CWE-79
Cross-site Scripting
CVE-2020-4419 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197620 6.5 MEDIUM
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485. CWE-863
 Incorrect Authorization
CVE-2020-4249 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm