Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229641	7.5	危険	valdersoft	-	Valdersoft Shopping Cart における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6691	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

229642	7.5	危険	TYPO3 Association	-	Typo3 の rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php における任意のコマンドを実行される脆弱性	-	CVE-2006-6690	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

229643	7.5	危険	web-app.net	-	WebAPP におけるフィルタリングのメカニズムを回避される脆弱性	-	CVE-2006-6688	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

229644	4.3	警告	web-app.net	-	WebAPP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-6687	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

229645	6.8	警告	textsend	-	Carsen Klock TextSend の sender.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6686	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

229646	5	警告	winftp server	-	WinFtp Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6673	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229647	6.8	警告	webcalendar	-	WebCalendar の export_handler.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6669	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229648	6.8	警告	verliadmin	-	VerliAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6668	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229649	7.5	危険	verliadmin	-	VerliAdmin における SQL インジェクションの脆弱性	-	CVE-2006-6667	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229650	7.5	危険	verliadmin	-	VerliAdmin の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6666	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197341	8.8	HIGH Network	plathome	easyblocks_ipv6_firmware easyblocks_ipv6_enterprise_firmware	Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators …	CWE-352 Origin Validation Error	CVE-2020-5549	2024-11-21 14:34	2020-04-8	Show	GitHub Exploit DB Packet Storm

197342	8.8	HIGH Network	amcrest	1080-lite_8ch_firmware amdv10814-h5_firmware ipm-721_firmware ip2m-841_firmware ip2m-841-v3_firmware ip2m-853ew_firmware ip2m-858w_firmware ip2m-866w_firmware ip2m-866ew_firmw…	Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.	CWE-787 Out-of-bounds Write	CVE-2020-5735	2024-11-21 14:34	2020-04-8	Show	GitHub Exploit DB Packet Storm

197343	7.5	HIGH Network	solarwinds	dameware	Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange.	CWE-120 Classic Buffer Overflow	CVE-2020-5734	2024-11-21 14:34	2020-04-7	Show	GitHub Exploit DB Packet Storm

197344	7.8	HIGH Local	symantec	data_center_security	Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to …	NVD-CWE-noinfo	CVE-2020-5832	2024-11-21 14:34	2020-04-7	Show	GitHub Exploit DB Packet Storm

197345	9.8	CRITICAL Network	learndash	learndash	LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-6009	2024-11-21 14:34	2020-04-2	Show	GitHub Exploit DB Packet Storm

197346	6.1	MEDIUM Network	auth0	wp-auth0	A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.	CWE-79 Cross-site Scripting	CVE-2020-5392	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197347	8.8	HIGH Network	auth0	wp-auth0	Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.	CWE-352 Origin Validation Error	CVE-2020-5391	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197348	7.5	HIGH Network	yamaha	rtx830_firmware nvr510_firmware nvr700w_firmware rtx1210_firmware rtx5000_firmware rtx3500_firmware fwx120_firmware rtx810_firmware nvr500_firmware rtx1200_firmware	Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and ear…	NVD-CWE-noinfo	CVE-2020-5548	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197349	9.8	CRITICAL Network	lifterlms	lifterlms	LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-6008	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197350	7.5	HIGH Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted use…	CWE-89 SQL Injection	CVE-2020-5726	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed