Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231041	4.3	警告	web-app.net	-	WebAPP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-6687	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

231042	6.8	警告	textsend	-	Carsen Klock TextSend の sender.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6686	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

231043	5	警告	winftp server	-	WinFtp Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6673	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231044	6.8	警告	webcalendar	-	WebCalendar の export_handler.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6669	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231045	6.8	警告	verliadmin	-	VerliAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6668	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231046	7.5	危険	verliadmin	-	VerliAdmin における SQL インジェクションの脆弱性	-	CVE-2006-6667	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231047	7.5	危険	verliadmin	-	VerliAdmin の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6666	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231048	4.1	警告	SUSE	-	SUSE Linux 上で稼動する Linux novell-lum におけるパスワードなしでコンソールへログインされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-6662	2012-12-20 18:02	2006-12-19	Show	GitHub Exploit DB Packet Storm

231049	7.5	危険	php-update	-	PHP-Update の blog.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-6661	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

231050	7.5	危険	planetluc.com	-	planetluc.com RateMe の main.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6648	2012-12-20 18:02	2006-12-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211301	9.8	CRITICAL Network	pandorafms	pandora_fms	Artica Pandora FMS 7.44 allows privilege escalation.	CWE-269 Improper Privilege Management	CVE-2020-13854	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211302	5.4	MEDIUM Network	pandorafms	pandora_fms	Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.	CWE-79 Cross-site Scripting	CVE-2020-13853	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211303	7.2	HIGH Network	pandorafms	pandora_fms	Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-13852	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211304	8.8	HIGH Network	pandorafms	pandora_fms	Artica Pandora FMS 7.44 allows remote command execution via the events feature.	CWE-78 OS Command	CVE-2020-13851	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211305	7.5	HIGH Network	pandorafms	pandora_fms	Artica Pandora FMS 7.44 has inadequate access controls on a web folder.	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-13850	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211306	5.3	MEDIUM Network	citrix	xenapp	Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is ent…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-13998	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211307	9.8	CRITICAL Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.	CWE-787 Out-of-bounds Write	CVE-2020-13901	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211308	7.5	HIGH Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.	CWE-476 NULL Pointer Dereference	CVE-2020-13900	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211309	7.5	HIGH Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.	CWE-908 Use of Uninitialized Resource	CVE-2020-13899	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

211310	7.5	HIGH Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.	CWE-476 NULL Pointer Dereference	CVE-2020-13898	2024-11-21 14:02	2020-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed