Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229791 7.5 危険 visualshapers - Visual Shapers ezContents における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4477 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229792 7.5 危険 Simple Machines - SMF における任意のローカルファイルを読むディレクトリトラバーサル攻撃を実行される脆弱性 - CVE-2006-4467 2012-12-20 18:02 2006-08-19 Show GitHub Exploit DB Packet Storm
229793 6.4 警告 phpgroupware - phpGroupWare の calendar/inc/class.holidaycalc.inc.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4458 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229794 7.5 危険 phpecard - phpECard の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4457 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229795 7.5 危険 phpecard - phpECard の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4456 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229796 4.3 警告 PmWiki - PmWiki におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4453 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
229797 7.5 危険 web3king - Web3news の security/include/_class.security.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4452 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
229798 5.1 警告 phpBB - PHPBB の usercp_avatar.php における Web のプロキシとしてサーバが使用される脆弱性 - CVE-2006-4450 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
229799 7.2 危険 X.Org Foundation - libX11 などを含む X.Org および XFree86 における権限を取得される脆弱性 - CVE-2006-4447 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
229800 7.5 危険 venture nine - Tagger LE における任意の PHP コードを実行される脆弱性 - CVE-2006-4437 2012-12-20 18:02 2006-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210971 7.2 HIGH
Network
cpanel cpanel cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). NVD-CWE-noinfo
CVE-2020-10120 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210972 9.8 CRITICAL
Network
cpanel cpanel cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544). NVD-CWE-noinfo
CVE-2020-10119 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210973 9.1 CRITICAL
Network
cpanel cpanel cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543). NVD-CWE-noinfo
CVE-2020-10118 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210974 9.1 CRITICAL
Network
cpanel cpanel cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). NVD-CWE-noinfo
CVE-2020-10117 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210975 5.3 MEDIUM
Network
cpanel cpanel cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). CWE-862
 Missing Authorization
CVE-2020-10116 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210976 7.2 HIGH
Network
cpanel cpanel cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). NVD-CWE-noinfo
CVE-2020-10115 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210977 6.1 MEDIUM
Network
cpanel cpanel cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). CWE-79
Cross-site Scripting
CVE-2020-10114 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210978 6.1 MEDIUM
Network
cpanel cpanel cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). CWE-79
Cross-site Scripting
CVE-2020-10113 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210979 9.8 CRITICAL
Network
gitlab gitlab GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-10077 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm
210980 6.1 MEDIUM
Network
gitlab gitlab GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests. CWE-79
Cross-site Scripting
CVE-2020-10076 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm