Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 17, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 231241 | 6.4 | 警告 | web directory pro | - | Web Directory Pro におけるコンフィギュレーションを変更される脆弱性 | - | CVE-2006-5905 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231242 | 7.5 | 危険 | rahul jonna | - | Rahul Jonna GSpace における仮想ファイルシステム操作を実行される脆弱性 | - | CVE-2006-5903 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231243 | 7.5 | 危険 | viksoe | - | viksoe GMail Drive シェルエクステンションにおける仮想ファイルシステムのアクションを実行される脆弱性 | - | CVE-2006-5902 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231244 | 6.8 | 警告 | Zend Technologies Ltd. | - | Zend Framework Preview の incubator/tests/Zend/Http/_files/testRedirections.php サンプルコードにおけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-5900 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231245 | 5 | 警告 | php heaven | - | PhpMyChat の localization/languages.lib.php3 におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-5898 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231246 | 5 | 警告 | php heaven | - | PhpMyChat Plus におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2006-5897 | 2012-12-20 18:02 | 2006-11-15 | Show | GitHub Exploit DB Packet Storm |
| 231247 | 5 | 警告 | remlab | - | REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 | - | CVE-2006-5896 | 2012-12-20 18:02 | 2006-11-27 | Show | GitHub Exploit DB Packet Storm |
| 231248 | 6.8 | 警告 | rama cms | - | Rama CMS の lang.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-5894 | 2012-12-20 18:02 | 2006-11-14 | Show | GitHub Exploit DB Packet Storm |
| 231249 | 7.5 | 危険 | the net guys | - | The Net Guys ASPired2Poll の MoreInfo.asp における SQL インジェクションの脆弱性 | - | CVE-2006-5892 | 2012-12-20 18:02 | 2006-11-14 | Show | GitHub Exploit DB Packet Storm |
| 231250 | 7.5 | 危険 | superfreaker studios | - | Superfreaker Studios Ustore の detail.asp における SQL インジェクションの脆弱性 | - | CVE-2006-5891 | 2012-12-20 18:02 | 2006-11-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 17, 2026, 4:15 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211701 | 6.5 |
MEDIUM
Network |
gnome canonical fedoraproject netapp broadcom |
balsa glib-networking ubuntu_linux fedora cloud_backup fabric_operating_system |
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server… |
CWE-295
Improper Certificate Validation |
CVE-2020-13645 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211702 | 5.4 |
MEDIUM
Network |
pickplugins | accordion | An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… |
CWE-79
Cross-site Scripting |
CVE-2020-13644 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211703 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … |
CWE-352
Origin Validation Error |
CVE-2020-13643 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211704 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… |
CWE-352
Origin Validation Error |
CVE-2020-13642 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211705 | 8.8 |
HIGH
Network |
infolific | real-time_find_and_replace | An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on beh… |
CWE-352
Origin Validation Error |
CVE-2020-13641 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211706 | 6.1 |
MEDIUM
Network |
fork-cms | fork_cms | Fork before 5.8.3 allows XSS via navigation_title or title. |
CWE-79
Cross-site Scripting |
CVE-2020-13633 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211707 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in v… |
CWE-79
Cross-site Scripting |
CVE-2020-13628 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211708 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in … |
CWE-79
Cross-site Scripting |
CVE-2020-13627 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211709 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade debian siemens oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware debian_linux sinec_infrastructu… |
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. |
CWE-476
NULL Pointer Dereference |
CVE-2020-13632 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211710 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade siemens apple oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware sinec_infrastructure_network_servi… |
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. |
NVD-CWE-noinfo
|
CVE-2020-13631 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |