Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248581 1.2 注意 Globus - Globus Toolkit の grid-proxy-init tool における資格情報を盗まれる脆弱性 - CVE-2006-4232 2012-06-26 15:37 2006-08-18 Show GitHub Exploit DB Packet Storm
248582 4.6 警告 Debian - man-db の man におけるバッファオーバーフローの脆弱性 - CVE-2006-4250 2012-06-26 15:37 2007-04-6 Show GitHub Exploit DB Packet Storm
248583 7.5 危険 cityforfree - CityForFree indexcity の list.php における SQL インジェクションの脆弱性 - CVE-2006-4323 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248584 7.5 危険 bits-dont-bite - Mambo 用の EstateAgent コンポーネントの estateagent.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4322 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248585 7.5 危険 Coppermine Photo Gallery - Mambo の cpg コンポーネント の cpg.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4321 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248586 5 警告 シスコシステムズ - Cisco VPN 3000 シリーズコンセントレータにおけるファイルを変更するための CWD コマンドなどを実行される脆弱性 - CVE-2006-4313 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248587 10 危険 ak-systems - AK-Systems Windows Terminal ExVLP の VNC サーバにおける RDP または Citrix のセッションを表示される脆弱性 - CVE-2006-4309 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248588 4.3 警告 Blackboard, Inc. - 複数の Blackboard 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-4308 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248589 10 危険 OpenBSD
FreeBSD
NetBSD		 - FreeBSD の sppp ドライバにおけるバッファオーバーフローの脆弱性 - CVE-2006-4304 2012-06-26 15:37 2006-08-23 Show GitHub Exploit DB Packet Storm
248590 7.5 危険 8pixel - SimpleBlog の comments.asp における SQL インジェクションの脆弱性 - CVE-2006-4300 2012-06-26 15:37 2006-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211031 4.4 MEDIUM
Local 		paloaltonetworks pan-os
vm-series 		TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard service account credent… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-1978 2024-11-21 14:11 2020-04-9 Show GitHub Exploit DB Packet Storm
211032 5.4 MEDIUM
Network 		redhat
quarkus 		keycloak
quarkus 		A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does n… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-1728 2024-11-21 14:11 2020-04-6 Show GitHub Exploit DB Packet Storm
211033 6.1 MEDIUM
Network 		apache
fedoraproject
debian
canonical
opensuse
netapp
broadcom
oracle 		http_server
fedora
debian_linux
ubuntu_linux
leap
oncommand_unified_manager_core_package
brocade_fabric_operating_system
sd-wan_aware
instantis_enterprisetrack
communicatio… 		In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL… CWE-601
Open Redirect 		CVE-2020-1927 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211034 6.5 MEDIUM
Network 		apache druid When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if… CWE-74
Injection 		CVE-2020-1958 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211035 5.3 MEDIUM
Adjacent 		apache
oracle
netapp 		cxf
peoplesoft_enterprise_peopletools
communications_diameter_signaling_router
communications_session_report_manager
communications_element_manager
enterprise_manager_base_platform
… 		Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationMa… NVD-CWE-noinfo
CVE-2020-1954 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211036 5.3 MEDIUM
Network 		apache
fedoraproject
debian
canonical
opensuse
oracle 		http_server
fedora
debian_linux
ubuntu_linux
leap
instantis_enterprisetrack
communications_element_manager
enterprise_manager_ops_center
communications_session_report_manager<… 		In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server. CWE-908
 Use of Uninitialized Resource 		CVE-2020-1934 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211037 6.1 MEDIUM
Network 		apache sling_cms Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attack… CWE-79
Cross-site Scripting 		CVE-2020-1949 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211038 6.1 MEDIUM
Network 		apache ofbiz Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07. CWE-79
Cross-site Scripting 		CVE-2020-1943 2024-11-21 14:11 2020-04-2 Show GitHub Exploit DB Packet Storm
211039 7.8 HIGH
Local 		systemd_project
redhat
debian 		systemd
enterprise_linux
openshift_container_platform
discovery
migration_toolkit
ceph_storage
debian_linux 		A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse… CWE-416
 Use After Free 		CVE-2020-1712 2024-11-21 14:11 2020-04-1 Show GitHub Exploit DB Packet Storm
211040 8.1 HIGH
Network 		otrs otrs An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passw… CWE-331
 Insufficient Entropy 		CVE-2020-1773 2024-11-21 14:11 2020-03-27 Show GitHub Exploit DB Packet Storm