Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230441	7.5	危険	webwork	-	WeBWorK PG Language の lib/WeBWorK/PG/Translator.pm における dangerousMacros.pl などの文字列を含む名前を伴う任意のマクロを起動される脆弱性	-	CVE-2006-6629	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

230442	10	危険	softwin	-	BitDefender 製品に同梱された PE ファイルの解析の実装における整数オーバーフローの脆弱性	-	CVE-2006-6627	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

230443	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の rpau3260.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6759	2012-12-20 18:02	2005-11-10	Show	GitHub Exploit DB Packet Storm

230444	10	危険	supportsoft シマンテック	-	複数の Symantec 製品で使用される SupportSoft の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	-	CVE-2006-6490	2012-12-20 18:02	2007-02-22	Show	GitHub Exploit DB Packet Storm

230445	5	警告	SISCO	-	SISCO MMS-EASE および ICCP Toolkit で使用されている SISCO OSI スタックにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6489	2012-12-20 18:02	2007-01-17	Show	GitHub Exploit DB Packet Storm

230446	4	警告	sambar	-	Sambar Server の FTP Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6624	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

230447	6	警告	w00t gallery	-	w00t Gallery の index.php における同一 Web サーバ上の他の環境へのアクセス権を取得される脆弱性	-	CVE-2006-6616	2012-12-20 18:02	2006-12-17	Show	GitHub Exploit DB Packet Storm

230448	1.9	注意	Debian thomas lange	-	FAI の save_log_local 関数におけるルートパスワードのハッシュを取得される脆弱性	-	CVE-2006-6614	2012-12-20 18:02	2006-12-11	Show	GitHub Exploit DB Packet Storm

230449	6.8	警告	phpalbum.net	-	phpAlbum の language.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6613	2012-12-20 18:02	2006-12-17	Show	GitHub Exploit DB Packet Storm

230450	7.5	危険	phpmycms	-	PhpMyCms の basic.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6612	2012-12-20 18:02	2006-12-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210921	9.1	CRITICAL Network	libexif_project debian canonical opensuse	libexif debian_linux ubuntu_linux leap	An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.	CWE-125 Out-of-bounds Read	CVE-2020-13112	2024-11-21 14:00	2020-05-22	Show	GitHub Exploit DB Packet Storm

210922	8.8	HIGH Network	centreon	centreon	Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include…	CWE-78 OS Command	CVE-2020-13252	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210923	8.8	HIGH Network	mariadb opensuse fedoraproject	connector\/c leap fedora	libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code s…	NVD-CWE-noinfo	CVE-2020-13249	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210924	7.8	HIGH Local	microweber	microweber	Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User scr…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-13241	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210925	7.5	HIGH Network	gitea	gitea	An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.	CWE-667 Improper Locking	CVE-2020-13246	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210926	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mec…	CWE-668 CWE-276 Exposure of Resource to Wrong Sphere Incorrect Default Permissions	CVE-2020-13240	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210927	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.	CWE-79 Cross-site Scripting	CVE-2020-13239	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210928	6.5	MEDIUM Network	cacti fedoraproject	cacti fedora	In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.	CWE-352 Origin Validation Error	CVE-2020-13231	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210929	4.3	MEDIUM Network	cacti debian fedoraproject	cacti debian_linux fedora	In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).	CWE-281 Improper Preservation of Permissions	CVE-2020-13230	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210930	5.5	MEDIUM Local	kde	amarok	A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-13152	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm