Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229951	7.5	危険	rediff	-	Rediff Bol Downloader OCX コントロールにおける重要な情報 (ユーザ名およびパス名) を取得される脆弱性	-	CVE-2006-6838	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229952	6.8	警告	sergey oblomov	-	Total Commander 用の ISO プラグインの LoadTree などの関数におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-6837	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229953	7.5	危険	yrch	-	Yrch! の plugins/metasearch/plug.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6823	2012-12-20 18:02	2006-12-29	Show	GitHub Exploit DB Packet Storm

229954	7.5	危険	vladimir menshakov	-	Vladimir Menshakov buratinable templator の process.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6809	2012-12-20 18:02	2006-12-29	Show	GitHub Exploit DB Packet Storm

229955	6.8	警告	WordPress.org	-	WordPress の wp-admin/templates.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6808	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

229956	7.5	危険	softwebsnepal	-	Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性	-	CVE-2006-6807	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

229957	6.8	警告	sh-news	-	SH-News の misc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6801	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

229958	7.5	危険	The Cacti Group	-	Cacti における SQL インジェクションの脆弱性	-	CVE-2006-6799	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

229959	7.5	危険	PHP Outburst	-	UPB の chat/login.php における任意の PHP コードを挿入される脆弱性	-	CVE-2006-6790	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

229960	7.5	危険	phpbbxtra	-	Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6789	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210781	5.5	MEDIUM Local	openexr fedoraproject canonical opensuse debian apple	openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados	An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.	CWE-125 Out-of-bounds Read	CVE-2020-11758	2024-11-21 13:58	2020-04-15	Show	GitHub Exploit DB Packet Storm

210782	5.5	MEDIUM Local	cellebrite	ufed_firmware	Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when perfor…	CWE-798 Use of Hard-coded Credentials	CVE-2020-11723	2024-11-21 13:58	2020-04-15	Show	GitHub Exploit DB Packet Storm

210783	5.5	MEDIUM Local	xen debian fedoraproject opensuse	xen debian_linux fedora leap	An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to ma…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-11740	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

210784	7.5	HIGH Network	snapcreek	duplicator	The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.	CWE-22 Path Traversal	CVE-2020-11738	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

210785	3.9	LOW Local	gnome debian canonical	file-roller debian_linux ubuntu_linux	fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the…	CWE-22 CWE-59 Path Traversal Link Following	CVE-2020-11736	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

210786	6.1	MEDIUM Network	cybersolutions	cybermail	cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.	CWE-79 Cross-site Scripting	CVE-2020-11734	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

210787	9.8	CRITICAL Network	total-soft	responsive_poll	An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage…	CWE-306 Missing Authentication for Critical Function	CVE-2020-11673	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

210788	7.5	HIGH Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.	NVD-CWE-noinfo	CVE-2020-11732	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

210789	6.1	MEDIUM Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute …	CWE-79 Cross-site Scripting	CVE-2020-11731	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

210790	7.5	HIGH Network	openresty debian	openresty debian_linux	An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.	CWE-444 HTTP Request Smuggling	CVE-2020-11724	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm