Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227521	7.5	危険	salims softhouse	-	ph03y3nk JAF CMS の module/shout/jafshout.php における "" で囲まれたセクション内の任意のコードを実行される脆弱性	-	CVE-2006-5131	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227522	6.8	警告	salims softhouse	-	ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5130	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227523	6.8	警告	salims softhouse	-	ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5129	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227524	7.5	危険	powerportal	-	John Himmelman PowerPortal の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5126	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227525	7.5	危険	phprojekt	-	Albrecht Guenther PHProjekt における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5123	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227526	7.5	危険	postnuke software foundation	-	PostNuke の Admin セクションにおける SQL インジェクションの脆弱性	-	CVE-2006-5121	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227527	4	警告	scott metoyer	-	Scott Metoyer Red Mombin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5120	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227528	4	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-5119	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

227529	7.5	危険	phpselect	-	PHPSelect Web Development Division 用の PDD パッケージにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5118	2012-12-20 18:02	2006-10-3	Show	GitHub Exploit DB Packet Storm

227530	5	警告	The phpMyAdmin Project	-	phpMyAdmin における重要な情報を取得される脆弱性	-	CVE-2006-5117	2012-12-20 18:02	2006-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 27, 2026, 1:20 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199361	9.8	CRITICAL Network	tp-link	wdr7400_firmware wdr7500_firmware wdr7660_firmware wdr7800_firmware wdr8400_firmware wdr8500_firmware wdr8600_firmware wdr8620_firmware wdr8640_firmware wdr8660_firmware	Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620…	CWE-120 Classic Buffer Overflow	CVE-2020-28877	2024-11-21 14:23	2020-11-21	Show	GitHub Exploit DB Packet Storm

199362	5.3	MEDIUM Network	bigbluebutton	bigbluebutton	web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name.	CWE-116 Improper Encoding or Escaping of Output	CVE-2020-28954	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199363	4.3	MEDIUM Network	bigbluebutton	bigbluebutton	In BigBlueButton before 2.2.29, a user can vote more than once in a single poll.	NVD-CWE-noinfo	CVE-2020-28953	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199364	7.5	HIGH Network	rclone fedoraproject	rclone fedora	An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The…	CWE-331 CWE-338 Insufficient Entropy Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2020-28924	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199365	9.8	CRITICAL Network	openwrt	openwrt	libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.	CWE-416 Use After Free	CVE-2020-28951	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199366	7.8	HIGH Local	php debian fedoraproject drupal	archive_tar debian_linux fedora drupal	Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.	CWE-502 Deserialization of Untrusted Data	CVE-2020-28948	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199367	5.5	MEDIUM Local	linux fedoraproject debian	linux_kernel fedora debian_linux	An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-28941	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199368	6.1	MEDIUM Network	misp	misp	In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.	CWE-79 Cross-site Scripting	CVE-2020-28947	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199369	4.3	MEDIUM Network	primekey	ejbca	An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the r…	CWE-295 Improper Certificate Validation	CVE-2020-28942	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199370	6.1	MEDIUM Network	palletsprojects	werkzeug	Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.	CWE-601 Open Redirect	CVE-2020-28724	2024-11-21 14:23	2020-11-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed