Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230141 7.5 危険 Powie - Powie pForum の editpoll.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-6038 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230142 7.5 危険 sitesoutlet - SitesOutlet E-commerce Kit-1 PayPal Edition における SQL インジェクションの脆弱性 - CVE-2006-6034 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230143 7.5 危険 sphpblog - SPHPBlog におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6033 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230144 6.8 警告 sphpblog - SPHPBlog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6032 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230145 7.5 危険 property pro - Property Pro の vir_Login.asp における SQL インジェクションの脆弱性 - CVE-2006-6029 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230146 10 危険 リアルネットワークス - Real Networks Helix Server などにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-6026 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230147 5 警告 クアルコム - QUALCOMM Eudora WorldMail におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6025 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230148 7.5 危険 クアルコム - Eudora Worldmail および Worldmail におけるバッファオーバーフローの脆弱性 - CVE-2006-6024 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230149 4 警告 WordPress.org - WordPress におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6017 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230150 4 警告 WordPress.org - WordPress の wp-admin/user-edit.php における任意のユーザのメタデータを読まれる脆弱性 - CVE-2006-6016 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198281 4.3 MEDIUM
Network
atlassian crucible
fisheye
The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authori… NVD-CWE-noinfo
CVE-2020-4014 2024-11-21 14:32 2020-06-1 Show GitHub Exploit DB Packet Storm
198282 5.4 MEDIUM
Network
atlassian crucible
fisheye
The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the re… CWE-79
Cross-site Scripting
CVE-2020-4013 2024-11-21 14:32 2020-06-1 Show GitHub Exploit DB Packet Storm
198283 3.3 LOW
Local
vmware workstation
fusion
esxi
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability i… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-3959 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
198284 5.5 MEDIUM
Local
vmware workstation
fusion
esxi
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerabi… CWE-617
 Reachable Assertion
CVE-2020-3958 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
198285 7.0 HIGH
Local
vmware fusion
horizon_client
remote_console
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-o… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3957 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
198286 6.1 MEDIUM
Network
ibm business_process_manager
business_automation_workflow
IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An a… NVD-CWE-Other
CVE-2020-4490 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
198287 7.0 HIGH
Local
ibm mq_for_hpe_nonstop IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. NVD-CWE-noinfo
CVE-2020-4352 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
198288 5.4 MEDIUM
Network
ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun… CWE-79
Cross-site Scripting
CVE-2020-4306 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
198289 2.7 LOW
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informat… CWE-209
Information Exposure Through an Error Message
CVE-2020-4248 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
198290 5.4 MEDIUM
Network
ibm jazz_reporting_service IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f… CWE-79
Cross-site Scripting
CVE-2020-4419 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm