Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229621 7.5 危険 vladimir menshakov - Vladimir Menshakov buratinable templator の process.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6809 2012-12-20 18:02 2006-12-29 Show GitHub Exploit DB Packet Storm
229622 6.8 警告 WordPress.org - WordPress の wp-admin/templates.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6808 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
229623 7.5 危険 softwebsnepal - Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性 - CVE-2006-6807 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
229624 6.8 警告 sh-news - SH-News の misc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6801 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
229625 7.5 危険 The Cacti Group - Cacti における SQL インジェクションの脆弱性 - CVE-2006-6799 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
229626 7.5 危険 PHP Outburst - UPB の chat/login.php における任意の PHP コードを挿入される脆弱性 - CVE-2006-6790 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
229627 7.5 危険 phpbbxtra - Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6789 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
229628 6.8 警告 timberwolf - TimberWolf の shownews.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6778 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
229629 9.3 危険 w3m project - w3m の file.c におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2006-6772 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
229630 6.8 警告 pwp technologies - PWP Technologies The Classified Ad System の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6768 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210921 9.1 CRITICAL
Network 		hashicorp vault HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3… NVD-CWE-noinfo
CVE-2020-10661 2024-11-21 13:55 2020-03-23 Show GitHub Exploit DB Packet Storm
210922 5.3 MEDIUM
Network 		hashicorp vault HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions… CWE-276
Incorrect Default Permissions  		CVE-2020-10660 2024-11-21 13:55 2020-03-23 Show GitHub Exploit DB Packet Storm
210923 7.5 HIGH
Network 		torproject
opensuse 		tor
leap
backports_sle 		Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_c… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-10593 2024-11-21 13:55 2020-03-23 Show GitHub Exploit DB Packet Storm
210924 7.5 HIGH
Network 		torproject
opensuse 		tor
leap
backports 		Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002. NVD-CWE-noinfo
CVE-2020-10592 2024-11-21 13:55 2020-03-23 Show GitHub Exploit DB Packet Storm
210925 6.5 MEDIUM
Network 		tesla model_3_web_interface The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer… NVD-CWE-noinfo
CVE-2020-10558 2024-11-21 13:55 2020-03-21 Show GitHub Exploit DB Packet Storm
210926 7.1 HIGH
Local 		deltaww delta_industrial_automation_dopsoft Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attac… CWE-125
Out-of-bounds Read 		CVE-2020-10597 2024-11-21 13:55 2020-03-21 Show GitHub Exploit DB Packet Storm
210927 7.8 HIGH
Local 		cmsmadesimple cms_made_simple The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/o… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-10682 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
210928 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1_files[] to admin/moduleinterface.php. CWE-79
Cross-site Scripting 		CVE-2020-10681 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
210929 7.5 HIGH
Network 		canon oce_colorwave_500_firmware The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the device's we… CWE-287
Improper Authentication 		CVE-2020-10669 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
210930 8.8 HIGH
Network 		canon oce_colorwave_500_firmware The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a log… CWE-352
 Origin Validation Error 		CVE-2020-10671 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm