Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229591 7.5 危険 phpMyFAQ - phpMyFAQ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6912 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229592 10 危険 東芝 - Toshiba Bluetooth スタックにおける管理者アクセス権限を取得される脆弱性 - CVE-2006-6903 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229593 5.4 警告 widcomm - Widcomm BTW におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6897 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229594 5.4 警告 plantronic - Plantronic Headset の Bluetooth スタックにおける許可されていない組み合わせ操作を実行される脆弱性 - CVE-2006-6896 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229595 2.9 注意 sony ericsson - Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性 - CVE-2006-6895 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229596 10 危険 spine - SPINE における脆弱性 - CVE-2006-6894 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229597 5 警告 The Tor Project - Tor における非表示サービスの IP アドレスを特定される脆弱性 - CVE-2006-6893 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229598 5 警告 vz forum - Adp Forum における管理者アカウント名などを取得される脆弱性 - CVE-2006-6891 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229599 7.5 危険 voc-project - Voodoo chat におけるパスワードをダウンロードされる脆弱性 - CVE-2006-6890 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229600 5 警告 p-news - P-News における管理者アカウント名などを取得される脆弱性 - CVE-2006-6888 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197321 8.1 HIGH
Network 		f5
netapp 		nginx_controller
cloud_backup 		In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages CWE-319
CWE-494
Cleartext Transmission of Sensitive Information
 Download of Code Without Integrity Check 		CVE-2020-5867 2024-11-21 14:34 2020-04-24 Show GitHub Exploit DB Packet Storm
197322 5.5 MEDIUM
Local 		f5 nginx_controller In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments. CWE-200
Information Exposure 		CVE-2020-5866 2024-11-21 14:34 2020-04-24 Show GitHub Exploit DB Packet Storm
197323 4.8 MEDIUM
Network 		f5
netapp 		nginx_controller
cloud_backup 		In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5865 2024-11-21 14:34 2020-04-24 Show GitHub Exploit DB Packet Storm
197324 7.4 HIGH
Network 		f5 nginx_controller In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default. CWE-295
Improper Certificate Validation  		CVE-2020-5864 2024-11-21 14:34 2020-04-24 Show GitHub Exploit DB Packet Storm
197325 7.5 HIGH
Network 		sharp aquos_sh-m02_firmware
aquos_sh-rm02_firmware
aquos_mini_sh-m03_firmware
aquos_l2_firmware
aquos_sense_lite_sh-m05_firmware
aquos_sense_firmware
aquos_compact_sh-m06_firmware
aquo… 		SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build num… CWE-200
Information Exposure 		CVE-2020-5571 2024-11-21 14:34 2020-04-23 Show GitHub Exploit DB Packet Storm
197326 7.8 HIGH
Local 		plex media_server Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-5740 2024-11-21 14:34 2020-04-23 Show GitHub Exploit DB Packet Storm
197327 8.4 HIGH
Local 		toshiba password_tool_for_windows An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO… CWE-428
 Unquoted Search Path or Element 		CVE-2020-5569 2024-11-21 14:34 2020-04-20 Show GitHub Exploit DB Packet Storm
197328 5.4 MEDIUM
Network 		tenable tenable.sc Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation technique… CWE-79
Cross-site Scripting 		CVE-2020-5737 2024-11-21 14:34 2020-04-18 Show GitHub Exploit DB Packet Storm
197329 6.1 MEDIUM
Network 		openmrs openmrs In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of… CWE-601
Open Redirect 		CVE-2020-5733 2024-11-21 14:34 2020-04-18 Show GitHub Exploit DB Packet Storm
197330 6.1 MEDIUM
Network 		openmrs openmrs In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticate… CWE-601
Open Redirect 		CVE-2020-5732 2024-11-21 14:34 2020-04-18 Show GitHub Exploit DB Packet Storm