Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 4.3 警告 professional home page tools login script - Professional Home Page Tools Login Script におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7078 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
230282 6.8 警告 phpBB - phpBB 用の Advanced Guestbook における SQL インジェクションの脆弱性 - CVE-2006-7077 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
230283 4.3 警告 phpBB - phpBB 用の Advanced Guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7076 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
230284 7.5 危険 smartsitecms - SmartSiteCMS の admin.php における認証を回避される脆弱性 - CVE-2006-7074 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
230285 7.5 危険 socketwiz - Socketwiz Bookmarks の smarty_config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7069 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
230286 7.5 危険 tinyphpforum - TinyPHPforum の profile.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-7063 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
230287 9.3 危険 scriptsez.net - Scriptsez.net E-Dating System におけるプライベートメッセージを読まれる脆弱性 - CVE-2006-7061 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
230288 5.8 警告 サン・マイクロシステムズ - Sun Solaris の .iked などに使用されている libike ライブラリにおける PKCS #1 v1.5 署名を偽造される脆弱性 CWE-DesignError
CVE-2006-7140 2012-12-20 18:18 2006-11-27 Show GitHub Exploit DB Packet Storm
230289 5 警告 scriptsez.net - Scriptsez.net E-Dating System の cindex.php におけるフルパスを取得される脆弱性 - CVE-2006-7060 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
230290 4.3 警告 scriptsez.net - Scriptsez.net E-Dating System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-7059 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210901 10.0 CRITICAL
Network 		beakerbrowser beaker Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. This occurs because Electron context isolation is not used, and therefore an attacker can conduct a prototype-p… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-12079 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210902 8.8 HIGH
Network 		mappresspro mappress The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capability checks), leading to remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12077 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210903 8.8 HIGH
Network 		supsystic data_tables_generator The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS. CWE-352
 Origin Validation Error 		CVE-2020-12076 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210904 8.8 HIGH
Network 		supsystic data_tables_generator The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. CWE-276
Incorrect Default Permissions  		CVE-2020-12075 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210905 8.8 HIGH
Network 		webtoffee import_export_wordpress_users The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV. CWE-269
 Improper Privilege Management 		CVE-2020-12074 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210906 8.8 HIGH
Network 		cyberchimps gutenberg_\&_elementor_templates_importer_for_responsive The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests. NVD-CWE-Other
CVE-2020-12073 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210907 4.8 MEDIUM
Network 		anchorcms anchor Anchor 0.12.7 allows admins to cause XSS via crafted post content. CWE-79
Cross-site Scripting 		CVE-2020-12071 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210908 7.5 HIGH
Network 		teeworlds
opensuse
fedoraproject
debian
canonical 		teeworlds
leap
backports_sle
fedora
debian_linux
ubuntu_linux 		CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. CWE-20
 Improper Input Validation  		CVE-2020-12066 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
210909 7.5 HIGH
Network 		linuxfoundation
canonical 		ceph
ubuntu_linux 		An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception. CWE-476
 NULL Pointer Dereference 		CVE-2020-12059 2024-11-21 13:59 2020-04-22 Show GitHub Exploit DB Packet Storm
210910 7.5 HIGH
Network 		mediawiki mediawiki The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In oth… NVD-CWE-noinfo
CVE-2020-12051 2024-11-21 13:59 2020-04-22 Show GitHub Exploit DB Packet Storm