Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230731 4.3 警告 wikini - WikiNi の actions/usersettings.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5516 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230732 7.5 危険 web group communication center - WGCC の quiz.php における SQL インジェクションの脆弱性 - CVE-2006-5514 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230733 4.3 警告 zwahlen informatik - Zwahlen Online Shop の article.htm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5512 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230734 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性 - CVE-2006-5509 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230735 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性 - CVE-2006-5508 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230736 7.5 危険 wiclear - WiClear における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5506 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230737 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5504 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230738 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5503 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230739 5.1 警告 xchangeboard - XchangeBoard の inc/DBInterface.php における SQL インジェクションの脆弱性 - CVE-2006-5500 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230740 6.8 警告 s9y - s9y におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5499 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212201 6.1 MEDIUM
Network
kaminari_project
debian
kaminari
debian_linux
In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. - CVE-2020-11082 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
212202 9.8 CRITICAL
Network
node-dns-sync_project node-dns-sync node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt… CWE-77
Command Injection
CVE-2020-11079 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
212203 9.9 CRITICAL
Network
anchore engine In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima… NVD-CWE-Other
CVE-2020-11075 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212204 7.5 HIGH
Network
aegir_project aegir In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i… CWE-200
Information Exposure
CVE-2020-11059 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212205 7.8 HIGH
Local
sympa
fedoraproject
debian
canonical
sympa
fedora
debian_linux
ubuntu_linux
Sympa before 6.2.56 allows privilege escalation. CWE-269
 Improper Privilege Management
CVE-2020-10936 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212206 6.1 MEDIUM
Network
centreon centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers… CWE-79
Cross-site Scripting
CVE-2020-10946 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212207 4.3 MEDIUM
Adjacent
centreon widget-host-monitoring
centreon
Centreon before 19.10.7 exposes Session IDs in server responses. CWE-200
Information Exposure
CVE-2020-10945 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212208 7.5 HIGH
Network
puma
fedoraproject
debian
puma
fedora
debian_linux
In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4. - CVE-2020-11076 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
212209 7.5 HIGH
Network
puma
fedoraproject
debian
opensuse
puma
fedora
debian_linux
leap
In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti… - CVE-2020-11077 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
212210 6.8 MEDIUM
Network
httplib2_project
fedoraproject
debian
httplib2
fedora
debian_linux
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. T… - CVE-2020-11078 2024-11-21 13:56 2020-05-21 Show GitHub Exploit DB Packet Storm