Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229931	5	警告	vz forum	-	Adp Forum における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6891	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229932	7.5	危険	voc-project	-	Voodoo chat におけるパスワードをダウンロードされる脆弱性	-	CVE-2006-6890	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229933	5	警告	p-news	-	P-News における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6888	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229934	5	警告	phpwcms	-	phpwcms における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2006-6886	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229935	9.3	危険	winzip	-	WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6884	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229936	7.5	危険	stavros markou	-	ATMEL Linux PCI PCMCIA USB Drivers drivers の cofvnet.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6881	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229937	7.5	危険	php-update	-	PHP-Update の code/guestadd.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-6880	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229938	6	警告	php-update	-	PHP-Update の admin/uploads.php における任意のコードをアップロードおよび実行される脆弱性	-	CVE-2006-6879	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229939	7.5	危険	php-update	-	PHP-Update の admin/uploads.php における権限を取得される脆弱性	-	CVE-2006-6878	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229940	6.8	警告	Zen Cart	-	Zen Cart Web Shopping Cart におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6868	2012-12-20 18:02	2006-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197781	9.8	CRITICAL Network	learndash	learndash	LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-6009	2024-11-21 14:34	2020-04-2	Show	GitHub Exploit DB Packet Storm

197782	6.1	MEDIUM Network	auth0	wp-auth0	A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.	CWE-79 Cross-site Scripting	CVE-2020-5392	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197783	8.8	HIGH Network	auth0	wp-auth0	Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.	CWE-352 Origin Validation Error	CVE-2020-5391	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197784	7.5	HIGH Network	yamaha	rtx830_firmware nvr510_firmware nvr700w_firmware rtx1210_firmware rtx5000_firmware rtx3500_firmware fwx120_firmware rtx810_firmware nvr500_firmware rtx1200_firmware	Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and ear…	NVD-CWE-noinfo	CVE-2020-5548	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197785	9.8	CRITICAL Network	lifterlms	lifterlms	LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-6008	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

197786	7.5	HIGH Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted use…	CWE-89 SQL Injection	CVE-2020-5726	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

197787	5.9	MEDIUM Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login action with a craft…	CWE-89 SQL Injection	CVE-2020-5725	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

197788	7.5	HIGH Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a c…	CWE-89 SQL Injection	CVE-2020-5724	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

197789	9.8	CRITICAL Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-5723	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

197790	7.5	HIGH Network	mitsubishielectric	cr800-q_firmware fx3g_firmware fx3gc_firmware fx3s_firmware fx3u_firmware fx3uc_firmware fx5u_firmware fx5uc_firmware fx5uj_firmware l02cpu_firmware l02cpu-p_firmware	When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), an…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-5527	2024-11-21 14:34	2020-03-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed