Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230861 7.5 危険 qksoft - QK SMTP におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5551 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230862 5 警告 シマンテック - Domino Server 用の Symantec Mail Security におけるスパム送信用の踏み台として製品を使用される脆弱性 - CVE-2006-5545 2012-12-20 18:02 2006-10-19 Show GitHub Exploit DB Packet Storm
230863 7.5 危険 ueberproject management system - UeberProject Management System の login/secure.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5539 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230864 4.3 警告 zwahlen informatik - Zwahlen Online Shop Freeware の index.htm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-5534 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230865 6.8 警告 XOOPS - RMSOFT Gallery System の rmgs/images.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5532 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230866 5.1 警告 schoolalumni portal - SchoolAlumni Portal の smumdadotcom_ascyb_alumni/mod.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5529 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230867 5 警告 schoolalumni portal - SchoolAlumni Portal の mod.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5528 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230868 5.1 警告 PHPNUKE - PHP-Nuke の mainfile.php における SQL インジェクション攻撃を実行される脆弱性 - CVE-2006-5525 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230869 6.8 警告 phpList - phplist の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5524 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
230870 7.5 危険 rhode island secretary of state - Rhode Island OMFA における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5517 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211451 6.5 MEDIUM
Adjacent
bluezone bluezone React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: … CWE-330
 Use of Insufficiently Random Values
CVE-2020-12270 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
211452 7.5 HIGH
Network
advanced-woo-search advanced_woo_search The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-se… CWE-200
Information Exposure
CVE-2020-12070 2024-11-21 13:59 2020-04-25 Show GitHub Exploit DB Packet Storm
211453 6.1 MEDIUM
Network
grafana grafana Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. CWE-79
Cross-site Scripting
CVE-2020-12245 2024-11-21 13:59 2020-04-25 Show GitHub Exploit DB Packet Storm
211454 6.1 MEDIUM
Network
gnu
debian
fedoraproject
canonical
opensuse
mailman
debian_linux
fedora
ubuntu_linux
leap
backports_sle
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP repl… CWE-79
Cross-site Scripting
CVE-2020-12137 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211455 5.5 MEDIUM
Local
whoopsie_project
mongodb
whoopsie
c_driver
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow … CWE-190
 Integer Overflow or Wraparound
CVE-2020-12135 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211456 9.8 CRITICAL
Network
nanometrics titansma
centaur
Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2020-12134 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211457 6.1 MEDIUM
Network
fifthplay s.a.m.i Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request. CWE-79
Cross-site Scripting
CVE-2020-12132 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211458 6.1 MEDIUM
Network
app2pro airdisk_pro The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo). CWE-79
Cross-site Scripting
CVE-2020-12131 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211459 5.3 MEDIUM
Network
postfix postfix A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homoglyph attack, as demonstrated by the similarity of \xce\xbf to the 'o' character… NVD-CWE-Other
CVE-2020-12063 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
211460 6.1 MEDIUM
Network
app2pro airdisk_pro The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function. CWE-79
Cross-site Scripting
CVE-2020-12130 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm