Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230441 10 危険 phpBB - phpBB の Dimension モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7174 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
230442 10 危険 php-stats - PHP-Stats の admin.php における任意の PHP コードを実行される脆弱性 - CVE-2006-7173 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230443 7.5 危険 php-stats - PHP-Stats の php-stats.recphp.php における SQL インジェクションの脆弱性 - CVE-2006-7172 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230444 6.8 警告 PHP Outburst - UPB の includes/header_simple.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7169 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230445 7.5 危険 prorat - ProRat Server におけるリモートログインに対する認証メカニズムを回避される脆弱性 - CVE-2006-7167 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230446 1.9 注意 レッドハット - RHEL のカーネルにおける虚偽の成功ステータスを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-0004 2012-12-20 18:19 2006-07-21 Show GitHub Exploit DB Packet Storm
230447 6.5 警告 XWiki - XWiki の PreviewAction における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2006-7223 2012-12-20 18:19 2006-10-11 Show GitHub Exploit DB Packet Storm
230448 7.5 危険 Sendmail Consortium - Red Hat Enterprise Linux 上で稼動する Sendmail における想定より少ないセキュアチャネルが使用される脆弱性 - CVE-2006-7175 2012-12-20 18:19 2005-11-3 Show GitHub Exploit DB Packet Storm
230449 1.9 注意 Simon Tatham - PuTTY における重要な情報を取得される脆弱性 - CVE-2006-7162 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
230450 10 危険 phpBB - Brazilian PHPBB の maluinfo における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7148 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198271 8.8 HIGH
Network
google
debian
fedoraproject
chrome
debian_linux
fedora
Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page. NVD-CWE-noinfo
CVE-2020-6420 2024-11-21 14:35 2020-03-24 Show GitHub Exploit DB Packet Storm
198272 5.9 MEDIUM
Network
citrix citrix_sd-wan_center
netscaler_sd-wan_center
Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation. CWE-295
Improper Certificate Validation 
CVE-2020-6175 2024-11-21 14:35 2020-03-17 Show GitHub Exploit DB Packet Storm
198273 6.1 MEDIUM
Network
sap fiori_launchpad SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable param… CWE-79
Cross-site Scripting
CVE-2020-6210 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198274 7.5 HIGH
Network
sap disclosure_management SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Miss… CWE-862
 Missing Authorization
CVE-2020-6209 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198275 8.2 HIGH
Local
sap crystal_reports SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus … CWE-416
 Use After Free
CVE-2020-6208 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198276 9.8 CRITICAL
Network
sap solution_manager SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgent… CWE-306
Missing Authentication for Critical Function
CVE-2020-6207 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198277 4.3 MEDIUM
Network
sap cloud_platform_integration SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted… CWE-352
 Origin Validation Error
CVE-2020-6206 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198278 4.3 MEDIUM
Network
sap treasury_and_risk_management_\(ea-finserv\)
treasury_and_risk_management_\(s4core\)
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more … CWE-862
 Missing Authorization
CVE-2020-6204 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198279 6.1 MEDIUM
Network
sap netweaver_as_abap_business_server_pages SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, 7.51, 7.52, 7.53, 7.54; does not sufficiently encode user controll… CWE-79
Cross-site Scripting
CVE-2020-6205 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm
198280 9.1 CRITICAL
Network
sap netweaver SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus ch… CWE-22
Path Traversal
CVE-2020-6203 2024-11-21 14:35 2020-03-11 Show GitHub Exploit DB Packet Storm