Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230241 7.5 危険 xennobb - XennoBB の topic_post.php における SQL インジェクションの脆弱性 - CVE-2006-4279 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
230242 7.5 危険 sportsphool - SportsPHool の includes/layout/plain.footer.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4278 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
230243 9 危険 symantec veritas - Symantec Veritas NetBackup PureDisk Remote Office Edition における認証を回避される脆弱性 - CVE-2006-4228 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
230244 4.3 警告 VWar - VWar の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4224 2012-12-20 18:02 2006-08-18 Show GitHub Exploit DB Packet Storm
230245 7.5 危険 Zen Cart - Zen Cart におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4218 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
230246 7.5 危険 webinsta - WEBInsta CMS の modules/usersonline/users.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4217 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
230247 5.1 警告 Zen Cart - Zen Cart の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4215 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
230248 7.5 危険 Zen Cart - Zen Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-4214 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
230249 7.5 危険 webinsta - WEBInsta Mailing List Manager の install3.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4209 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
230250 5 警告 skippy.net - WordPress 用の Skippy WP-DB-Backup プラグインにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-4208 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211361 7.8 HIGH
Local
microsoft word
sharepoint_foundation
office_web_apps
sharepoint_server
office
sharepoint_enterprise_server
office_365_proplus
office_online_server
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is un… NVD-CWE-noinfo
CVE-2020-0892 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211362 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… NVD-CWE-noinfo
CVE-2020-0887 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211363 4.3 MEDIUM
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. NVD-CWE-noinfo
CVE-2020-0885 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211364 3.7 LOW
Network
microsoft visual_studio_2019
visual_studio_2017
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-0884 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211365 8.8 HIGH
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is … NVD-CWE-noinfo
CVE-2020-0883 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211366 6.5 MEDIUM
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is u… NVD-CWE-noinfo
CVE-2020-0882 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211367 8.8 HIGH
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is … NVD-CWE-noinfo
CVE-2020-0881 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211368 6.5 MEDIUM
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is u… NVD-CWE-noinfo
CVE-2020-0880 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211369 5.5 MEDIUM
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted syst… NVD-CWE-noinfo
CVE-2020-0879 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm
211370 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… NVD-CWE-noinfo
CVE-2020-0877 2024-11-21 13:54 2020-03-13 Show GitHub Exploit DB Packet Storm