Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226671	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5204	2013-03-19 18:42	2013-03-7	Show	GitHub Exploit DB Packet Storm

226672	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5205	2013-03-19 18:41	2013-03-7	Show	GitHub Exploit DB Packet Storm

226673	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5206	2013-03-19 18:39	2013-03-7	Show	GitHub Exploit DB Packet Storm

226674	9	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5207	2013-03-19 18:37	2013-03-7	Show	GitHub Exploit DB Packet Storm

226675	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5208	2013-03-19 18:36	2013-03-7	Show	GitHub Exploit DB Packet Storm

226676	4	警告	Spree Commerce	-	Spree における任意のロールを割り当てられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2506	2013-03-19 18:34	2013-02-21	Show	GitHub Exploit DB Packet Storm

226677	10	危険	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-5209	2013-03-19 18:27	2013-03-7	Show	GitHub Exploit DB Packet Storm

226678	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center TACACS+ Authentication Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5210	2013-03-19 18:25	2013-03-7	Show	GitHub Exploit DB Packet Storm

226679	7.5	危険	ヒューレット・パッカード	-	HP Intelligent Management Center User Access Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5211	2013-03-19 18:24	2013-03-7	Show	GitHub Exploit DB Packet Storm

226680	6.8	警告	ヒューレット・パッカード	-	HP Intelligent Management Center および Intelligent Management Center for Automated Network Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5212	2013-03-19 18:23	2013-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209131	9.8	CRITICAL Network	heybbs_project	heybbs	Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.	CWE-89 SQL Injection	CVE-2020-25006	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209132	9.8	CRITICAL Network	heybbs_project	heybbs	Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.	CWE-89 SQL Injection	CVE-2020-25005	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209133	9.8	CRITICAL Network	heybbs_project	heybbs	Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.	CWE-89 SQL Injection	CVE-2020-25004	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209134	6.5	MEDIUM Network	xmlsoft debian fedoraproject opensuse netapp oracle	libxml2 debian_linux fedora leap snapdrive clustered_data_ontap clustered_data_ontap_antivirus_connector active_iq_unified_manager manageability_software_development_kit in…	GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.	CWE-125 Out-of-bounds Read	CVE-2020-24977	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209135	9.8	CRITICAL Network	pancakeapp	pancake	Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.	CWE-798 Use of Hard-coded Credentials	CVE-2020-24876	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209136	7.2	HIGH Network	maracms	maracms	An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request t…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-25042	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209137	7.2	HIGH Network	autoptimize	autoptimize	The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PH…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-24948	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209138	5.5	MEDIUM Local	midnightbsd freebsd	midnightbsd freebsd	A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger …	CWE-787 Out-of-bounds Write	CVE-2020-24863	2024-11-21 14:16	2020-09-4	Show	GitHub Exploit DB Packet Storm

209139	8.8	HIGH Network	php-fusion	php-fusion	Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).	NVD-CWE-noinfo	CVE-2020-24949	2024-11-21 14:16	2020-09-3	Show	GitHub Exploit DB Packet Storm

209140	7.8	HIGH Local	kaspersky	security_center_web_console security_center	Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privi…	CWE-427 Uncontrolled Search Path Element	CVE-2020-25045	2024-11-21 14:16	2020-09-3	Show	GitHub Exploit DB Packet Storm