Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230711 6.8 警告 phpcards - phpCards の phpcards.footer.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5605 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230712 7.5 危険 phpcards - phpCards の phpcards.header.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5604 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230713 7.5 危険 Snitz - Snitz Forums 2000 の pop_mail.asp における SQL インジェクションの脆弱性 - CVE-2006-5603 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230714 4 警告 xsupplicant - xsupplicant におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5602 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230715 9 危険 xsupplicant - xsupplicant の eap.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5601 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230716 4.3 警告 webgeneius - GOOP Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5598 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230717 7.5 危険 university of british columbia - University of British Columbia iPeer における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5594 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230718 5 警告 webasyst llc - Shop-Script の premium/index.php における CRLF インジェクションの脆弱性 - CVE-2006-5566 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230719 5 警告 Yahoo! - Yahoo! Messenger におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5563 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
230720 7.5 危険 revilloc solutions - RevilloC MailServer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5552 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211461 8.8 HIGH
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by systemic CSRF. CWE-352
 Origin Validation Error 		CVE-2020-11438 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211462 4.3 MEDIUM
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database. CWE-89
SQL Injection 		CVE-2020-11437 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211463 9.0 CRITICAL
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators. CWE-79
Cross-site Scripting 		CVE-2020-11436 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211464 9.1 CRITICAL
Network 		inetsoftware pdfc
helpdesk
clear_reports 		The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on th… CWE-22
Path Traversal 		CVE-2020-11431 2024-11-21 13:57 2020-05-8 Show GitHub Exploit DB Packet Storm
211465 7.5 HIGH
Network 		openvpn openvpn_access_server An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management … CWE-776
XML Entity Expansion 		CVE-2020-11462 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211466 8.1 HIGH
Network 		zoom it_installer The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able t… CWE-59
CWE-732
Link Following
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-11443 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211467 7.8 HIGH
Local 		eset internet_security
nod32_antivirus
smart_security
endpoint_security
endpoint_antivirus
mail_security
file_security
antivirus_and_antispyware 		ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these… CWE-59
Link Following 		CVE-2020-11446 2024-11-21 13:57 2020-04-29 Show GitHub Exploit DB Packet Storm
211468 4.9 MEDIUM
Network 		sonatype nexus_repository_manager An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cle… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-11415 2024-11-21 13:57 2020-04-28 Show GitHub Exploit DB Packet Storm
211469 6.5 MEDIUM
Network 		abb
generex 		cs141_firmware UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by do… CWE-22
Path Traversal 		CVE-2020-11420 2024-11-21 13:57 2020-04-27 Show GitHub Exploit DB Packet Storm
211470 5.4 MEDIUM
Network 		jetbrains space JetBrains Space through 2020-04-22 allows stored XSS in Chats. CWE-79
Cross-site Scripting 		CVE-2020-11416 2024-11-21 13:57 2020-04-22 Show GitHub Exploit DB Packet Storm