Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248411	10	危険	E-Xoopport	-	E-Xoopport における詳細不明な脆弱性	-	CVE-2006-5978	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248412	7.5	危険	Expinion.net	-	MultiCalendars における SQL インジェクションの脆弱性	-	CVE-2006-5977	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248413	7.5	危険	drumster	-	BlogMe の admin_login.asp における SQL インジェクションの脆弱性	-	CVE-2006-5976	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248414	6.8	警告	drumster	-	BlogMe の comments.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5975	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248415	7.8	危険	Fetchmail Project	-	fetchmail におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2006-5974	2012-06-26 15:37	2006-12-31	Show	GitHub Exploit DB Packet Storm

248416	4.6	警告	fvwm	-	fvwm の evalFolderLine 関数における CRLF インジェクションの脆弱性	-	CVE-2006-5969	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

248417	4.6	警告	Alt-N	-	MDaemon における任意のコードを実行される脆弱性	-	CVE-2006-5968	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

248418	7.5	危険	20 20 applications	-	20/20 DataShed の listings.asp における SQL インジェクションの脆弱性	-	CVE-2006-5955	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

248419	7.5	危険	asp smiley	-	ASP Smiley の admin/default.asp における SQL インジェクションの脆弱性	-	CVE-2006-5952	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

248420	7.5	危険	exophpdesk	-	Exophpdesk の pipe.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5951	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211371	5.3	MEDIUM Adjacent	apache oracle netapp	cxf peoplesoft_enterprise_peopletools communications_diameter_signaling_router communications_session_report_manager communications_element_manager enterprise_manager_base_platform …	Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationMa…	NVD-CWE-noinfo	CVE-2020-1954	2024-11-21 14:11	2020-04-2	Show	GitHub Exploit DB Packet Storm

211372	5.3	MEDIUM Network	apache fedoraproject debian canonical opensuse oracle	http_server fedora debian_linux ubuntu_linux leap instantis_enterprisetrack communications_element_manager enterprise_manager_ops_center communications_session_report_manager<…	In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.	CWE-908 Use of Uninitialized Resource	CVE-2020-1934	2024-11-21 14:11	2020-04-2	Show	GitHub Exploit DB Packet Storm

211373	6.1	MEDIUM Network	apache	sling_cms	Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attack…	CWE-79 Cross-site Scripting	CVE-2020-1949	2024-11-21 14:11	2020-04-2	Show	GitHub Exploit DB Packet Storm

211374	6.1	MEDIUM Network	apache	ofbiz	Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.	CWE-79 Cross-site Scripting	CVE-2020-1943	2024-11-21 14:11	2020-04-2	Show	GitHub Exploit DB Packet Storm

211375	7.8	HIGH Local	systemd_project redhat debian	systemd enterprise_linux openshift_container_platform discovery migration_toolkit ceph_storage debian_linux	A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse…	CWE-416 Use After Free	CVE-2020-1712	2024-11-21 14:11	2020-04-1	Show	GitHub Exploit DB Packet Storm

211376	8.1	HIGH Network	otrs	otrs	An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passw…	CWE-331 Insufficient Entropy	CVE-2020-1773	2024-11-21 14:11	2020-03-27	Show	GitHub Exploit DB Packet Storm

211377	7.5	HIGH Network	otrs opensuse debian	otrs leap backports_sle debian_linux	It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue…	NVD-CWE-noinfo	CVE-2020-1772	2024-11-21 14:11	2020-03-27	Show	GitHub Exploit DB Packet Storm

211378	5.4	MEDIUM Network	otrs	otrs	Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter enc…	CWE-79 Cross-site Scripting	CVE-2020-1771	2024-11-21 14:11	2020-03-27	Show	GitHub Exploit DB Packet Storm

211379	4.3	MEDIUM Network	otrs opensuse debian	otrs leap backports_sle debian_linux	Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior …	CWE-200 Information Exposure	CVE-2020-1770	2024-11-21 14:11	2020-03-27	Show	GitHub Exploit DB Packet Storm

211380	4.3	MEDIUM Network	otrs opensuse	otrs leap backports_sle	In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0…	NVD-CWE-noinfo	CVE-2020-1769	2024-11-21 14:11	2020-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed