Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229311 7.5 危険 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE における任意のローカルファイルをインクルードされる脆弱性 - CVE-2006-6419 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229312 7.5 危険 phpleague - univert - PhpLeague - Univert PhpLeague における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6416 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229313 4.6 警告 VMware - VMWare の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6410 2012-12-20 18:02 2006-12-9 Show GitHub Exploit DB Packet Storm
229314 5 警告 softwin - SMB の BitDefender Mail Protection におけるウィルス検出を回避される脆弱性 - CVE-2006-6405 2012-12-20 18:02 2006-12-9 Show GitHub Exploit DB Packet Storm
229315 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6399 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
229316 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6398 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
229317 5 警告 ulrik petersen - Ulrik Petersen Emdros Database Engine におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6395 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
229318 7.5 危険 plx web studio - plx Web Studio plx Pay の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6392 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
229319 6.8 警告 positive software - Positive Software H-Sphere のコントロールパネルにおける任意のファイルにログデータを追加される脆弱性 - CVE-2006-6382 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
229320 7.5 危険 ultimate helpdesk - Ultimate HelpDesk の getfile.asp におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6381 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210771 9.8 CRITICAL
Network
sumavision enhanced_multimedia_router_firmware goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_us… CWE-352
 Origin Validation Error
CVE-2020-10181 2024-11-21 13:54 2020-03-12 Show GitHub Exploit DB Packet Storm
210772 6.1 MEDIUM
Network
munkireport_project munkireport An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/broken_client endpoint. The payload will be executed by any authen… CWE-79
Cross-site Scripting
CVE-2020-10192 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
210773 5.4 MEDIUM
Network
munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /module/comment/save endpoint. The payload will be executed by any authenticated … CWE-79
Cross-site Scripting
CVE-2020-10191 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
210774 8.8 HIGH
Network
munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint. CWE-89
SQL Injection
CVE-2020-10190 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
210775 8.1 HIGH
Network
gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document. CWE-787
 Out-of-bounds Write
CVE-2020-10223 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
210776 8.1 HIGH
Network
gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. NVD-CWE-noinfo
CVE-2020-10222 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
210777 8.8 HIGH
Network
rconfig rconfig lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. CWE-78
OS Command 
CVE-2020-10221 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
210778 9.8 CRITICAL
Network
rconfig rconfig An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. CWE-89
SQL Injection
CVE-2020-10220 2024-11-21 13:54 2020-03-8 Show GitHub Exploit DB Packet Storm
210779 8.8 HIGH
Network
dlink
trendnet
dir-825_firmware
tew-632brp_firmware
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1… CWE-78
OS Command 
CVE-2020-10216 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
210780 8.8 HIGH
Network
dlink
trendnet
dir-825_firmware
tew-632brp_firmware
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-… CWE-78
OS Command 
CVE-2020-10215 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm