Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248471	7.5	危険	Atomix Productions	-	AtomixMP3 におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-6287	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248472	7.5	危険	dicshunary	-	dicshunary の check_status.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6281	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248473	5	警告	alexphpteam	-	@lex Guestbook の index.php における重要な情報を取得される脆弱性	-	CVE-2006-6279	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248474	6.8	警告	alexphpteam	-	@lex Guestbook の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6278	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248475	5	警告	contentserv	-	ContentServ の admin/FileServer.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6277	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248476	6.8	警告	Expinion.net	-	Expinion.net iNews Publisher (iNP) などの articles.asp における SQL インジェクションの脆弱性	-	CVE-2006-6274	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248477	10	危険	alternc	-	AlternC の class/functions.php および class/m_bro.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6259	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248478	9.3	危険	alternc	-	AlternC の phpmyadmin サブシステムにおけるパスワードを取得される脆弱性	-	CVE-2006-6258	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248479	6.8	警告	alternc	-	AlternC のファイルマネージャーにおける重要な情報を取得される脆弱性	-	CVE-2006-6257	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

248480	6.8	警告	alternc	-	AlternC の admin/bro_main.php のファイルマネージャーにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6256	2012-06-26 15:38	2006-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210921	7.8	HIGH Local	openzfs	openzfs	OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.	CWE-863 Incorrect Authorization	CVE-2020-24716	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

210922	6.1	MEDIUM Network	wso2	identity_server_analytics identity_server_as_key_manager identity_server api_manager api_manager_analytics iot_server	An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity…	CWE-79 Cross-site Scripting	CVE-2020-24706	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

210923	8.8	HIGH Network	wso2	identity_server_analytics identity_server_as_key_manager identity_server api_manager api_manager_analytics iot_server	An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Ses…	NVD-CWE-noinfo	CVE-2020-24705	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

210924	6.1	MEDIUM Network	wso2	identity_server enterprise_integrator api_microgateway api_manager_analytics iot_server identity_server_analytics data_analytics_server identity_server_as_key_manager api_mana…	An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.…	CWE-79 Cross-site Scripting	CVE-2020-24704	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

210925	8.8	HIGH Network	wso2	identity_server enterprise_integrator api_microgateway api_manager_analytics iot_server identity_server_analytics data_analytics_server identity_server_as_key_manager api_mana…	An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Ses…	NVD-CWE-noinfo	CVE-2020-24703	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

210926	6.1	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows XSS attacks.	CWE-79 Cross-site Scripting	CVE-2020-24599	2024-11-21 14:15	2020-08-27	Show	GitHub Exploit DB Packet Storm

210927	6.1	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of com_content leads to an open redirect.	CWE-601 Open Redirect	CVE-2020-24598	2024-11-21 14:15	2020-08-27	Show	GitHub Exploit DB Packet Storm

210928	5.9	MEDIUM Network	gnome fedoraproject	geary fedora	GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not confi…	CWE-295 Improper Certificate Validation	CVE-2020-24661	2024-11-21 14:15	2020-08-27	Show	GitHub Exploit DB Packet Storm

210929	6.5	MEDIUM Network	maltego	maltego	Maltego before 4.2.12 allows XXE attacks.	CWE-611 XXE	CVE-2020-24656	2024-11-21 14:15	2020-08-26	Show	GitHub Exploit DB Packet Storm

210930	9.8	CRITICAL Network	expo	expo	secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is used.	NVD-CWE-noinfo	CVE-2020-24653	2024-11-21 14:15	2020-08-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed