Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248571	5.1	警告	アップル	-	LaunchServices の Download Validation における Javascript を実行される脆弱性	-	CVE-2006-3504	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248572	5.1	警告	アップル	-	Apple Mac OS X の ImageIO における整数オーバーフローの脆弱性	-	CVE-2006-3503	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248573	5.1	警告	アップル	-	Apple Mac OS X の ImageIO におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3502	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248574	5.1	警告	アップル	-	ImageIO における整数オーバーフローの脆弱性	-	CVE-2006-3501	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248575	7.2	危険	アップル	-	Apple Mac OS X の動的リンカーにおける任意のコードを実行される脆弱性	-	CVE-2006-3500	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248576	2.1	注意	アップル	-	Mac OS X の動的リンカーにおける重要な情報を取得される脆弱性	-	CVE-2006-3499	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248577	10	危険	アップル	-	DHCP コンポーネントの bootpd におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3498	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248578	5.1	警告	アップル	-	Apple Mac OS X 用 Bom の "圧縮ステート処理" におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2006-3497	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248579	5	警告	アップル	-	Apple Mac OS X の AFP Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3496	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

248580	2.1	注意	アップル	-	Apple Mac OS X の AFP Server における他のユーザのファイルにアクセスされる脆弱性	-	CVE-2006-3495	2012-06-26 15:37	2006-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199171	6.5	MEDIUM Network	golfbuddyglobal	course_manager	In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.	CWE-200 CWE-326 Information Exposure Inadequate Encryption Strength	CVE-2020-9337	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199172	5.3	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-9407	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199173	9.8	CRITICAL Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.	CWE-94 Code Injection	CVE-2020-9406	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199174	6.1	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.	CWE-79 Cross-site Scripting	CVE-2020-9405	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199175	9.8	CRITICAL Network	ispconfig	ispconfig	ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.	CWE-89 SQL Injection	CVE-2020-9398	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199176	8.8	HIGH Network	supsystic	pricing_table_by_supsystic	An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-9394	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199177	6.1	MEDIUM Network	supsystic	pricing_table_by_supsystic	An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-9393	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199178	6.5	MEDIUM Network	mitel	micontact_center_business	The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful e…	NVD-CWE-noinfo	CVE-2020-9379	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199179	5.5	MEDIUM Local	linux fedoraproject netapp	linux_kernel fedora cloud_backup steelstore_cloud_integrated_storage data_availability_services solidfire hci_management_node active_iq_unified_manager h410c_firmware	An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory …	CWE-787 Out-of-bounds Write	CVE-2020-9391	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

199180	4.8	MEDIUM Network	10web	photo_gallery	Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arb…	CWE-79 Cross-site Scripting	CVE-2020-9335	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed