Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230531 6 警告 php-update - PHP-Update の admin/uploads.php における任意のコードをアップロードおよび実行される脆弱性 - CVE-2006-6879 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230532 7.5 危険 php-update - PHP-Update の admin/uploads.php における権限を取得される脆弱性 - CVE-2006-6878 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230533 6.8 警告 Zen Cart - Zen Cart Web Shopping Cart におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6868 2012-12-20 18:02 2006-12-30 Show GitHub Exploit DB Packet Storm
230534 7.5 危険 vladimir meshakov - Vladimir Menshakov buratinable templator における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6867 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230535 7.8 危険 stphp - STphp EasyNews におけるユーザ名などを取得される脆弱性 - CVE-2006-6866 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230536 7.8 危険 softartisans - SAFileUp の SAFileUpSamples/util/viewsrc.asp におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6865 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230537 10 危険 website designs for less - Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6859 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230538 7.5 危険 webtext - WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性 - CVE-2006-6856 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230539 7.5 危険 shadowed works - Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6850 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230540 5 警告 リアルネットワークス - RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6847 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198331 6.5 MEDIUM
Network 		google
opensuse 		chrome
backports_sle 		Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. CWE-20
 Improper Input Validation  		CVE-2020-6401 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198332 6.5 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-6400 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198333 6.5 MEDIUM
Network 		google
opensuse 		chrome
backports_sle 		Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2020-6399 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198334 8.8 HIGH
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. CWE-908
 Use of Uninitialized Resource 		CVE-2020-6398 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198335 6.5 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page. NVD-CWE-noinfo
CVE-2020-6397 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198336 4.3 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. NVD-CWE-noinfo
CVE-2020-6396 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198337 6.5 MEDIUM
Network 		google chrome Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. CWE-125
Out-of-bounds Read 		CVE-2020-6395 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198338 5.4 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page. NVD-CWE-noinfo
CVE-2020-6394 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198339 6.5 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CWE-862
 Missing Authorization 		CVE-2020-6393 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm
198340 4.3 MEDIUM
Network 		google
opensuse
fedoraproject
debian
suse
redhat 		chrome
backports_sle
fedora
debian_linux
package_hub
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a … CWE-79
Cross-site Scripting 		CVE-2020-6392 2024-11-21 14:35 2020-02-12 Show GitHub Exploit DB Packet Storm