Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230381	6.8	警告	salims softhouse	-	ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5129	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230382	7.5	危険	powerportal	-	John Himmelman PowerPortal の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5126	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230383	7.5	危険	phprojekt	-	Albrecht Guenther PHProjekt における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5123	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230384	7.5	危険	postnuke software foundation	-	PostNuke の Admin セクションにおける SQL インジェクションの脆弱性	-	CVE-2006-5121	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230385	4	警告	scott metoyer	-	Scott Metoyer Red Mombin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5120	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230386	4	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-5119	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

230387	7.5	危険	phpselect	-	PHPSelect Web Development Division 用の PDD パッケージにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5118	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

230388	5	警告	The phpMyAdmin Project	-	phpMyAdmin における重要な情報を取得される脆弱性	-	CVE-2006-5117	2012-12-20 18:02	2006-10-1	Show	GitHub Exploit DB Packet Storm

230389	5.1	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性	-	CVE-2006-5116	2012-12-20 18:02	2006-10-1	Show	GitHub Exploit DB Packet Storm

230390	6.8	警告	SAP	-	SAP ITS の wgate におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5114	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212321	7.5	HIGH Network	microsoft	windows_server_2012 windows_server_2008 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.	NVD-CWE-noinfo	CVE-2020-0645	2024-11-21 13:53	2020-03-13	Show	GitHub Exploit DB Packet Storm

212322	7.8	HIGH Local	intel	raid_web_console_3	Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2020-0564	2024-11-21 13:53	2020-02-14	Show	GitHub Exploit DB Packet Storm

212323	7.8	HIGH Local	intel	manycore_platform_software_stack	Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-0563	2024-11-21 13:53	2020-02-14	Show	GitHub Exploit DB Packet Storm

212324	7.8	HIGH Local	intel	raid_web_console_2	Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2020-0562	2024-11-21 13:53	2020-02-14	Show	GitHub Exploit DB Packet Storm

212325	7.8	HIGH Local	intel opensuse	software_guard_extensions_sdk leap backports	Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-665 Improper Initialization	CVE-2020-0561	2024-11-21 13:53	2020-02-14	Show	GitHub Exploit DB Packet Storm

212326	7.8	HIGH Local	intel	renesas_electronics_usb_3.0_driver	Improper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local acc…	CWE-276 Incorrect Default Permissions	CVE-2020-0560	2024-11-21 13:53	2020-02-14	Show	GitHub Exploit DB Packet Storm

212327	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique f…	NVD-CWE-noinfo	CVE-2020-0683	2024-11-21 13:53	2020-02-12	Show	GitHub Exploit DB Packet Storm

212328	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnera…	NVD-CWE-noinfo	CVE-2020-0682	2024-11-21 13:53	2020-02-12	Show	GitHub Exploit DB Packet Storm

212329	7.5	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE…	NVD-CWE-noinfo	CVE-2020-0681	2024-11-21 13:53	2020-02-12	Show	GitHub Exploit DB Packet Storm

212330	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnera…	NVD-CWE-noinfo	CVE-2020-0680	2024-11-21 13:53	2020-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed