Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230681	7.5	危険	web group communication center	-	WGCC の quiz.php における SQL インジェクションの脆弱性	-	CVE-2006-5514	2012-12-20 18:02	2006-10-26	Show	GitHub Exploit DB Packet Storm

230682	4.3	警告	zwahlen informatik	-	Zwahlen Online Shop の article.htm におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5512	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230683	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-5509	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230684	7.5	危険	woltlab	-	WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性	-	CVE-2006-5508	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230685	7.5	危険	wiclear	-	WiClear における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5506	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230686	4.3	警告	Simple Machines	-	SMF の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5504	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230687	4.3	警告	Simple Machines	-	SMF の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5503	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230688	5.1	警告	xchangeboard	-	XchangeBoard の inc/DBInterface.php における SQL インジェクションの脆弱性	-	CVE-2006-5500	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230689	6.8	警告	s9y	-	s9y におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5499	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

230690	4.3	警告	timothy claason	-	Timothy Claason KnowledgeBank におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5496	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211471	9.8	CRITICAL Network	gira	tks-ip-gateway_firmware	Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root acce…	CWE-22 Path Traversal	CVE-2020-10794	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211472	5.4	MEDIUM Network	bookstackapp	bookstack	In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system …	CWE-79 Cross-site Scripting	CVE-2020-11055	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211473	3.5	LOW Network	qutebrowser fedoraproject	qutebrowser fedora	In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (col…	-	CVE-2020-11054	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211474	6.1	MEDIUM Network	oauth2_proxy_project	oauth2_proxy	In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This…	CWE-601 Open Redirect	CVE-2020-11053	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211475	9.8	CRITICAL Network	sorcery_project	sorcery	In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined l…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-11052	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211476	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.	-	CVE-2020-11049	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211477	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.	-	CVE-2020-11048	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211478	5.9	MEDIUM Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated me…	-	CVE-2020-11047	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211479	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.	-	CVE-2020-11046	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

211480	3.3	LOW Network	freerdp debian canonical	freerdp debian_linux ubuntu_linux	In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.	-	CVE-2020-11045	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm