Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230991 5.4 警告 plantronic - Plantronic Headset の Bluetooth スタックにおける許可されていない組み合わせ操作を実行される脆弱性 - CVE-2006-6896 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230992 2.9 注意 sony ericsson - Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性 - CVE-2006-6895 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230993 10 危険 spine - SPINE における脆弱性 - CVE-2006-6894 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230994 5 警告 The Tor Project - Tor における非表示サービスの IP アドレスを特定される脆弱性 - CVE-2006-6893 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230995 5 警告 vz forum - Adp Forum における管理者アカウント名などを取得される脆弱性 - CVE-2006-6891 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230996 7.5 危険 voc-project - Voodoo chat におけるパスワードをダウンロードされる脆弱性 - CVE-2006-6890 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230997 5 警告 p-news - P-News における管理者アカウント名などを取得される脆弱性 - CVE-2006-6888 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230998 5 警告 phpwcms - phpwcms における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2006-6886 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230999 9.3 危険 winzip - WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6884 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231000 7.5 危険 stavros markou - ATMEL Linux PCI PCMCIA USB Drivers drivers の cofvnet.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6881 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212061 6.5 MEDIUM
Network 		roundcube
debian 		webmail
debian_linux 		An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. CWE-352
 Origin Validation Error 		CVE-2020-12626 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
212062 6.1 MEDIUM
Network 		roundcube
debian
opensuse 		webmail
debian_linux
leap
backports_sle 		An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. CWE-79
Cross-site Scripting 		CVE-2020-12625 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
212063 6.5 MEDIUM
Network 		theleague the_league The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, whic… CWE-459
 Incomplete Cleanup 		CVE-2020-12624 2024-11-21 13:59 2020-05-3 Show GitHub Exploit DB Packet Storm
212064 6.5 MEDIUM
Network 		telegram telegram
telegram_desktop 		Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL. NVD-CWE-noinfo
CVE-2020-12474 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
212065 5.3 MEDIUM
Network 		moxa nport_5100a_firmware Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthentic… CWE-306
Missing Authentication for Critical Function 		CVE-2020-12117 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
212066 7.0 HIGH
Local 		fedoraproject
opensuse
sqliteodbc_project 		fedora
backports_sle
sqliteodbc 		SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new co… CWE-362
Race Condition 		CVE-2020-12050 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
212067 4.3 MEDIUM
Network 		xt-commerce xt-commerce The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an … CWE-276
Incorrect Default Permissions  		CVE-2020-12101 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212068 6.1 MEDIUM
Network 		sourcegraph sourcegraph Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the //foo//example.com su… CWE-601
Open Redirect 		CVE-2020-12283 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212069 8.8 HIGH
Network 		teampass teampass TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal. CWE-22
Path Traversal 		CVE-2020-12479 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212070 7.5 HIGH
Network 		teampass teampass TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files. CWE-306
Missing Authentication for Critical Function 		CVE-2020-12478 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm