Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230371	7.5	危険	tumbleweed	-	Tumbleweed EMF におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3901	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230372	6.8	警告	tobias kloy	-	TP-Book の guestbook.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3900	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230373	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3899	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230374	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3898	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230375	5	警告	マイクロソフト	-	Windows 上で稼動する Microsoft Internet Explorer 6 におけるスタックオーバフローの脆弱性	-	CVE-2006-3897	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230376	9.3	危険	winzip sky software	-	WinZip などで使用される Sky Software FileView ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3890	2012-12-20 18:02	2006-11-21	Show	GitHub Exploit DB Packet Storm

230377	7.5	危険	musicbox	-	Shalwan MusicBox における SQL インジェクションの脆弱性	-	CVE-2006-3886	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

230378	5	警告	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point Firewall-1 R55W におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-3885	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

230379	7.5	危険	gonafish	-	Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性	-	CVE-2006-3884	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

230380	4.3	警告	gonafish	-	Gonafish LinksCaffe におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3883	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212081	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0631	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212082	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0630	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212083	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0629	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212084	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0628	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212085	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0627	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212086	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0626	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212087	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0625	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212088	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is …	NVD-CWE-noinfo	CVE-2020-0623	2024-11-21 13:53	2020-01-15	Show	GitHub Exploit DB Packet Storm

212089	8.8	HIGH Network	3cx debian	phone_system_firmware debian_linux	PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><sp…	CWE-77 Command Injection	CVE-2019-9972	2024-11-21 13:52	2022-06-8	Show	GitHub Exploit DB Packet Storm

212090	8.8	HIGH Network	3cx debian	phone_system_firmware debian_linux	PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs bec…	CWE-269 Improper Privilege Management	CVE-2019-9971	2024-11-21 13:52	2022-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed