Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249071 7.2 危険 FreeBSD - FreeBSD の i386_set_ldt 呼び出しにおける整数オーバーフローの脆弱性 - CVE-2006-4172 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
249072 6.8 警告 cpg-nuke - Dragonfly CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4162 2012-06-26 15:37 2006-08-16 Show GitHub Exploit DB Packet Storm
249073 7.5 危険 chaussette - Chaussette における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4159 2012-06-26 15:37 2006-08-16 Show GitHub Exploit DB Packet Storm
249074 6.8 警告 Apache Software Foundation - Apache の mod_tc モジュールにおける任意のコードを実行される脆弱性 - CVE-2006-4154 2012-06-26 15:37 2006-10-16 Show GitHub Exploit DB Packet Storm
249075 5 警告 arcsoft - ArcSoft MMS Composer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4132 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
249076 7.5 危険 arcsoft - ArcSoft MMS Composer におけるバッファオーバーフローの脆弱性 - CVE-2006-4131 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
249077 4.6 警告 dconnect - DConnect Daemon におけるフォーマットストリングの脆弱性 - CVE-2006-4127 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
249078 5 警告 dconnect - DConnect Daemon の cmd.dc.c の dc_chat 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4126 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
249079 7.5 危険 dconnect - DConnect Daemon の main.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4125 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
249080 7.5 危険 boite de news - Boite de News の boitenews4/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4123 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209881 6.5 MEDIUM
Network 		matrix
fedoraproject 		synapse
fedora 		Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed e… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-26257 2024-11-21 14:19 2020-12-10 Show GitHub Exploit DB Packet Storm
209882 7.9 HIGH
Local 		jupyterhub systemdspawner jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are sp… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-26261 2024-11-21 14:19 2020-12-10 Show GitHub Exploit DB Packet Storm
209883 6.4 MEDIUM
Network 		bookstackapp bookstack BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulat… CWE-74
Injection 		CVE-2020-26260 2024-11-21 14:19 2020-12-10 Show GitHub Exploit DB Packet Storm
209884 8.7 HIGH
Network 		cogboard red-dashboard Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord … CWE-79
Cross-site Scripting 		CVE-2020-26249 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm
209885 4.8 MEDIUM
Network 		apereo opencast Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when usin… CWE-346
 Origin Validation Error 		CVE-2020-26234 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm
209886 6.5 MEDIUM
Network 		c2fo fast-csv Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node. In fast-cvs before version 4.3.6 there is a possible ReDoS vulnerability (Regular Expression Deni… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-26256 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm
209887 7.3 HIGH
Network 		microsoft git_credential_manager_core Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively clo… - CVE-2020-26233 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm
209888 9.1 CRITICAL
Network 		getkirby panel
kirby 		Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26255 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm
209889 5.4 MEDIUM
Network 		student_management_system_project_in_php_project student_management_system_project_in_php SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS) via the 'add subject' tab. CWE-79
Cross-site Scripting 		CVE-2020-25955 2024-11-21 14:19 2020-12-8 Show GitHub Exploit DB Packet Storm
209890 7.7 HIGH
Network 		omniauth-apple_project omniauth-apple omniauth-apple is the OmniAuth strategy for "Sign In with Apple" (RubyGem omniauth-apple). In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vu… CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-26254 2024-11-21 14:19 2020-12-9 Show GitHub Exploit DB Packet Storm