Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248851	5	警告	grayscale	-	Grayscale BandSite CMS における重要な情報を取得される脆弱性	-	CVE-2006-4986	2012-06-26 15:37	2006-09-25	Show	GitHub Exploit DB Packet Storm

248852	4.3	警告	grayscale	-	Grayscale BandSite CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-4985	2012-06-26 15:37	2006-09-25	Show	GitHub Exploit DB Packet Storm

248853	7.5	危険	grayscale	-	Grayscale BandSite CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4984	2012-06-26 15:37	2006-09-25	Show	GitHub Exploit DB Packet Storm

248854	7.5	危険	シスコシステムズ	-	Cisco NAC におけるコントロールメソッドを回避される脆弱性	-	CVE-2006-4983	2012-06-26 15:37	2006-09-25	Show	GitHub Exploit DB Packet Storm

248855	4.6	警告	シスコシステムズ	-	Cisco NAC におけるローカルネットワークに接続される脆弱性	-	CVE-2006-4982	2012-06-26 15:37	2006-09-25	Show	GitHub Exploit DB Packet Storm

248856	4.3	警告	DNN	-	Perpetual Motion Interactive Systems DotNetNuke の Default.aspx におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4973	2012-06-26 15:37	2006-09-17	Show	GitHub Exploit DB Packet Storm

248857	7.5	危険	chumpsoft	-	phpQ の inc/ifunctions.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4966	2012-06-26 15:37	2006-09-24	Show	GitHub Exploit DB Packet Storm

248858	6.4	警告	Exponent CMS project	-	Exponent CMS の index.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4963	2012-06-26 15:37	2006-09-23	Show	GitHub Exploit DB Packet Storm

248859	6.4	警告	blue dragon	-	Php Blue Dragon の pbd_engine.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4962	2012-06-26 15:37	2006-09-23	Show	GitHub Exploit DB Packet Storm

248860	7.5	危険	blue dragon	-	Php Blue Dragon の GetModuleConfig 関数における SQL インジェクションの脆弱性	-	CVE-2006-4961	2012-06-26 15:37	2006-09-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210111	7.5	HIGH Network	mediawiki fedoraproject	mediawiki fedora	An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should…	CWE-863 Incorrect Authorization	CVE-2020-26121	2024-11-21 14:19	2020-09-28	Show	GitHub Exploit DB Packet Storm

210112	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex section line replacement from PageGateway. Using crafted HTML, an attacker can e…	CWE-79 Cross-site Scripting	CVE-2020-26120	2024-11-21 14:19	2020-09-28	Show	GitHub Exploit DB Packet Storm

210113	8.1	HIGH Network	tigervnc debian opensuse	tigervnc debian_linux leap	In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a cert…	CWE-295 Improper Certificate Validation	CVE-2020-26117	2024-11-21 14:19	2020-09-27	Show	GitHub Exploit DB Packet Storm

210114	7.2	HIGH Network	python fedoraproject canonical netapp debian oracle opensuse	python fedora ubuntu_linux solidfire hci_storage_node debian_linux zfs_storage_appliance_kit leap	http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by ins…	CWE-74 Injection	CVE-2020-26116	2024-11-21 14:19	2020-09-27	Show	GitHub Exploit DB Packet Storm

210115	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).	CWE-79 Cross-site Scripting	CVE-2020-26115	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210116	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).	CWE-79 Cross-site Scripting	CVE-2020-26114	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210117	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).	CWE-79 Cross-site Scripting	CVE-2020-26113	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210118	7.5	HIGH Network	cpanel	cpanel	The email quota cache in cPanel before 90.0.10 allows overwriting of files.	NVD-CWE-noinfo	CVE-2020-26112	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210119	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).	CWE-79 Cross-site Scripting	CVE-2020-26111	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

210120	6.1	MEDIUM Network	cpanel	cpanel	cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).	CWE-79 Cross-site Scripting	CVE-2020-26110	2024-11-21 14:19	2020-09-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed