Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230281	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-5509	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230282	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性	-	CVE-2006-5508	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230283	7.5	危険	wiclear	-	WiClear における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5506	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230284	4.3	警告	Simple Machines	-	SMF の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5504	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230285	4.3	警告	Simple Machines	-	SMF の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5503	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230286	5.1	警告	xchangeboard	-	XchangeBoard の inc/DBInterface.php における SQL インジェクションの脆弱性	-	CVE-2006-5500	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230287	6.8	警告	s9y	-	s9y におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5499	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230288	4.3	警告	timothy claason	-	Timothy Claason KnowledgeBank におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5496	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230289	7.5	危険	trawler	-	Trawler Web CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5495	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230290	7.5	危険	PHPNUKE	-	PHP-Nuke 用の pandaBB モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5494	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211001	5.5	MEDIUM Local	openexr fedoraproject canonical debian apple	openexr fedora ubuntu_linux debian_linux tvos iphone_os icloud itunes watchos ipados mac_os_x	An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of…	CWE-190 Integer Overflow or Wraparound	CVE-2020-11759	2024-11-21 13:58	2020-04-15	Show	GitHub Exploit DB Packet Storm

211002	5.5	MEDIUM Local	openexr fedoraproject canonical opensuse debian apple	openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados	An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.	CWE-125 Out-of-bounds Read	CVE-2020-11758	2024-11-21 13:58	2020-04-15	Show	GitHub Exploit DB Packet Storm

211003	5.5	MEDIUM Local	cellebrite	ufed_firmware	Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when perfor…	CWE-798 Use of Hard-coded Credentials	CVE-2020-11723	2024-11-21 13:58	2020-04-15	Show	GitHub Exploit DB Packet Storm

211004	5.5	MEDIUM Local	xen debian fedoraproject opensuse	xen debian_linux fedora leap	An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to ma…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-11740	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

211005	7.5	HIGH Network	snapcreek	duplicator	The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.	CWE-22 Path Traversal	CVE-2020-11738	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

211006	3.9	LOW Local	gnome debian canonical	file-roller debian_linux ubuntu_linux	fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the…	CWE-22 CWE-59 Path Traversal Link Following	CVE-2020-11736	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

211007	6.1	MEDIUM Network	cybersolutions	cybermail	cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.	CWE-79 Cross-site Scripting	CVE-2020-11734	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

211008	9.8	CRITICAL Network	total-soft	responsive_poll	An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage…	CWE-306 Missing Authentication for Critical Function	CVE-2020-11673	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

211009	7.5	HIGH Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.	NVD-CWE-noinfo	CVE-2020-11732	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

211010	6.1	MEDIUM Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute …	CWE-79 Cross-site Scripting	CVE-2020-11731	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed