Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248671 7.5 危険 banex - Banex PHP MySQL Banner Exchange における SQL インジェクションの脆弱性 - CVE-2006-3963 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
248672 7.5 危険 bosdev - BosDev BosDates の payment.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3957 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
248673 7.5 危険 EFS Software - EFS Software Easy File Sharing FTP Server におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3952 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
248674 7.5 危険 AOL - America Online Security Edition で使用される AOL.YGP Pic Downloader YGPPDownload ActiveX におけるバッファオーバーフローの脆弱性 - CVE-2006-3888 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248675 7.5 危険 AOL - AOL YGP Screensaver ActiveX コントロール におけるバッファオーバーフローの脆弱性 - CVE-2006-3887 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
248676 7.2 危険 アップル - AirPort ワイヤレスドライバ用の API における整数オーバーフローの脆弱性 - CVE-2006-3509 2012-06-26 15:37 2006-09-21 Show GitHub Exploit DB Packet Storm
248677 7.2 危険 アップル - AirPort ワイヤレスドライバ におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-3508 2012-06-26 15:37 2006-09-21 Show GitHub Exploit DB Packet Storm
248678 7.2 危険 アップル - AirPort ワイヤレスドライバにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3507 2012-06-26 15:37 2006-09-21 Show GitHub Exploit DB Packet Storm
248679 4.6 警告 アップル - Xsan Filesystem ドライバにおける任意のコードを実行される脆弱性 - CVE-2006-3506 2012-06-26 15:37 2006-08-21 Show GitHub Exploit DB Packet Storm
248680 7.5 危険 アップル - Apple Mac OS X の WebKit におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3505 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199941 7.8 HIGH
Local
adobe illustrator Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution . CWE-787
 Out-of-bounds Write
CVE-2020-9575 2024-11-21 14:40 2020-06-26 Show GitHub Exploit DB Packet Storm
199942 4.8 MEDIUM
Network
secureauth secureauth_identity_provider SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS. CWE-79
Cross-site Scripting
CVE-2020-9437 2024-11-21 14:40 2020-06-26 Show GitHub Exploit DB Packet Storm
199943 7.5 HIGH
Network
apache
debian
traffic_server
debian_linux
Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and sp… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-9494 2024-11-21 14:40 2020-06-25 Show GitHub Exploit DB Packet Storm
199944 9.8 CRITICAL
Network
apache
oracle
spark
business_intelligence
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craf… CWE-306
Missing Authentication for Critical Function
CVE-2020-9480 2024-11-21 14:40 2020-06-24 Show GitHub Exploit DB Packet Storm
199945 5.9 MEDIUM
Network
tinxy smart_wifi_door_lock_firmware Tinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock request that occurred when the attacker was previously authorized. In other words, door-access revocat… CWE-294
Authentication Bypass by Capture-replay 
CVE-2020-9438 2024-11-21 14:40 2020-06-24 Show GitHub Exploit DB Packet Storm
199946 5.4 MEDIUM
Network
fortinet fortiwlc An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Prof… CWE-79
Cross-site Scripting
CVE-2020-9288 2024-11-21 14:40 2020-06-23 Show GitHub Exploit DB Packet Storm
199947 5.3 MEDIUM
Network
apache archiva Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login f… CWE-74
Injection
CVE-2020-9495 2024-11-21 14:40 2020-06-20 Show GitHub Exploit DB Packet Storm
199948 7.8 HIGH
Local
huawei fusionsphere_openstack FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assignment when an actor attempts to perform an action. Success… CWE-269
 Improper Privilege Management
CVE-2020-9225 2024-11-21 14:40 2020-06-18 Show GitHub Exploit DB Packet Storm
199949 7.8 HIGH
Local
fabulatech usb_for_remote_desktop ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device. NVD-CWE-noinfo
CVE-2020-9332 2024-11-21 14:40 2020-06-18 Show GitHub Exploit DB Packet Storm
199950 7.5 HIGH
Network
fortinet fortimanager
fortianalyzer
Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configu… CWE-798
 Use of Hard-coded Credentials
CVE-2020-9289 2024-11-21 14:40 2020-06-17 Show GitHub Exploit DB Packet Storm