Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248811	5	警告	alientrap	-	Nexuiz におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6609	2012-06-26 15:38	2006-12-17	Show	GitHub Exploit DB Packet Storm

248812	7.5	危険	clarens	-	Clarens jclarens における SQL インジェクションの脆弱性	-	CVE-2006-6606	2012-06-26 15:38	2006-12-17	Show	GitHub Exploit DB Packet Storm

248813	7.5	危険	exlor	-	EXlor の fonctions/template.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6591	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

248814	6.8	警告	Apache Software Foundation	-	Apache OFBiz および Opentaps の ecommerce/control/keywordsearch におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6589	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

248815	7.5	危険	Apache Software Foundation	-	Apache OFBiz のフォーラム実装におけるコンテンツを改ざんされる脆弱性	-	CVE-2006-6588	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

248816	6.8	警告	Apache Software Foundation	-	Apache OFBiz の ecommerce コンポーネントにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6587	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

248817	7.5	危険	brian drawert	-	Brian Drawert yaplap の ldap.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6575	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

248818	6	警告	シトリックス・システムズ	-	Citrix Access Gateway Advanced Edition および Citrix Access Gateway Advanced Edition with AAC におけるデータへのアクセス権を取得される脆弱性	-	CVE-2006-6573	2012-06-26 15:38	2006-11-4	Show	GitHub Exploit DB Packet Storm

248819	6.5	警告	シトリックス・システムズ	-	Citrix AAC Option および Access Gateway with Advanced Access Control におけるアクセスポリシーを回避される脆弱性	-	CVE-2006-6572	2012-06-26 15:38	2006-11-4	Show	GitHub Exploit DB Packet Storm

248820	6.8	警告	genesistrader	-	GenesisTrader の form.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6571	2012-06-26 15:38	2006-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210111	7.5	HIGH Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should…	CWE-863 Incorrect Authorization	CVE-2020-26121	2024-11-21 14:19	2020-09-28	Show	GitHub Exploit DB Packet Storm

210112	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex section line replacement from PageGateway. Using crafted HTML, an attacker can e…	CWE-79 Cross-site Scripting	CVE-2020-26120	2024-11-21 14:19	2020-09-28	Show	GitHub Exploit DB Packet Storm

210113	8.1	HIGH Network	tigervnc debian opensuse	tigervnc debian_linux leap	In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a cert…	CWE-295 Improper Certificate Validation	CVE-2020-26117	2024-11-21 14:19	2020-09-27	Show	GitHub Exploit DB Packet Storm

210114	7.2	HIGH Network	python fedoraproject canonical netapp debian oracle opensuse	python fedora ubuntu_linux solidfire hci_storage_node debian_linux zfs_storage_appliance_kit leap	http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by ins…	CWE-74 Injection	CVE-2020-26116	2024-11-21 14:19	2020-09-27	Show	GitHub Exploit DB Packet Storm

210115	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).	CWE-79 Cross-site Scripting	CVE-2020-26115	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210116	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).	CWE-79 Cross-site Scripting	CVE-2020-26114	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210117	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).	CWE-79 Cross-site Scripting	CVE-2020-26113	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210118	7.5	HIGH Network	cpanel	cpanel	The email quota cache in cPanel before 90.0.10 allows overwriting of files.	NVD-CWE-noinfo	CVE-2020-26112	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210119	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).	CWE-79 Cross-site Scripting	CVE-2020-26111	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210120	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).	CWE-79 Cross-site Scripting	CVE-2020-26110	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed