Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230731 6.8 警告 phpquickgallery - PHPQuickGallery の gallery_top.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6044 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230732 6.8 警告 phpwebthings - phpWebThings の core/editor.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6042 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230733 7.5 危険 Powie - Powie の PHP MatchMaker における SQL インジェクションの脆弱性 - CVE-2006-6039 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230734 7.5 危険 Powie - Powie pForum の editpoll.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-6038 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230735 7.5 危険 sitesoutlet - SitesOutlet E-commerce Kit-1 PayPal Edition における SQL インジェクションの脆弱性 - CVE-2006-6034 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230736 7.5 危険 sphpblog - SPHPBlog におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6033 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230737 6.8 警告 sphpblog - SPHPBlog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6032 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230738 7.5 危険 property pro - Property Pro の vir_Login.asp における SQL インジェクションの脆弱性 - CVE-2006-6029 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230739 10 危険 リアルネットワークス - Real Networks Helix Server などにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-6026 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
230740 5 警告 クアルコム - QUALCOMM Eudora WorldMail におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6025 2012-12-20 18:02 2006-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212321 5.5 MEDIUM
Local
windowshello_project windowshello The WindowsHello open source library (NuGet HaemmerElectronics.SeppPenner.WindowsHello), before version 1.0.4, has a vulnerability where encrypted data could potentially be decrypted without needing … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11005 2024-11-21 13:56 2020-04-15 Show GitHub Exploit DB Packet Storm
212322 6.8 MEDIUM
Network
torchbox wagtail In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scripting (XSS) vulnerability exists on the page revision comparison view within the Wagtail admin interface. A user with a limited-permission… - CVE-2020-11001 2024-11-21 13:56 2020-04-15 Show GitHub Exploit DB Packet Storm
212323 4.3 MEDIUM
Network
gitlab gitlab GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project. NVD-CWE-noinfo
CVE-2020-10981 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212324 9.8 CRITICAL
Network
gitlab gitlab GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-10980 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212325 4.3 MEDIUM
Network
gitlab gitlab GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users. NVD-CWE-noinfo
CVE-2020-10979 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212326 5.3 MEDIUM
Network
gitlab gitlab GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private project through Web-UI and GraphQL API. NVD-CWE-noinfo
CVE-2020-10978 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212327 8.8 HIGH
Network
dropwizard dropwizard_validation dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the self-validating feature enabling attackers to … CWE-74
Injection
CVE-2020-11002 2024-11-21 13:56 2020-04-11 Show GitHub Exploit DB Packet Storm
212328 5.5 MEDIUM
Local
gitlab gitlab GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. CWE-22
Path Traversal
CVE-2020-10977 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212329 7.5 HIGH
Network
gitlab gitlab GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget. CWE-200
Information Exposure
CVE-2020-10976 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm
212330 4.3 MEDIUM
Network
gitlab gitlab GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized users on the vulnerability feedback page. NVD-CWE-noinfo
CVE-2020-10975 2024-11-21 13:56 2020-04-9 Show GitHub Exploit DB Packet Storm