Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230181 5 警告 php heaven - PhpMyChat の localization/languages.lib.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5898 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
230182 5 警告 php heaven - PhpMyChat Plus におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-5897 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
230183 5 警告 remlab - REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 - CVE-2006-5896 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
230184 6.8 警告 rama cms - Rama CMS の lang.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5894 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230185 7.5 危険 the net guys - The Net Guys ASPired2Poll の MoreInfo.asp における SQL インジェクションの脆弱性 - CVE-2006-5892 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230186 7.5 危険 superfreaker studios - Superfreaker Studios Ustore の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-5891 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230187 7.5 危険 superfreaker studios - Superfreaker Studios Usupport の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-5890 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230188 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher の viewarticle.asp における SQL インジェクションの脆弱性 - CVE-2006-5888 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230189 5.1 警告 pstotext - pstotext における任意のコマンドを実行される脆弱性 - CVE-2006-5869 2012-12-20 18:02 2006-11-26 Show GitHub Exploit DB Packet Storm
230190 6.4 警告 phpmanta - phpManta の Mdoc/view-sourcecode.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5866 2012-12-20 18:02 2006-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210811 9.8 CRITICAL
Network 		mi xiaomi_r3600_firmware Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to po… NVD-CWE-noinfo
CVE-2020-11960 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
210812 7.5 HIGH
Network 		mi xiaomi_r3600_firmware An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. NVD-CWE-noinfo
CVE-2020-11959 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
210813 7.8 HIGH
Local 		winmagic securedoc The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-11520 2024-11-21 13:58 2020-06-23 Show GitHub Exploit DB Packet Storm
210814 7.8 HIGH
Local 		winmagic securedoc The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle. Exploiting this vulnerability results in … NVD-CWE-noinfo
CVE-2020-11519 2024-11-21 13:58 2020-06-23 Show GitHub Exploit DB Packet Storm
210815 9.8 CRITICAL
Network 		sophos sfos A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely. CWE-787
 Out-of-bounds Write 		CVE-2020-11503 2024-11-21 13:58 2020-06-19 Show GitHub Exploit DB Packet Storm
210816 4.3 MEDIUM
Adjacent 		treck tcp\/ip The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read. CWE-125
Out-of-bounds Read 		CVE-2020-11914 2024-11-21 13:58 2020-06-17 Show GitHub Exploit DB Packet Storm
210817 5.3 MEDIUM
Network 		treck tcp\/ip The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. CWE-125
Out-of-bounds Read 		CVE-2020-11913 2024-11-21 13:58 2020-06-17 Show GitHub Exploit DB Packet Storm
210818 5.3 MEDIUM
Network 		treck tcp\/ip The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. CWE-125
Out-of-bounds Read 		CVE-2020-11912 2024-11-21 13:58 2020-06-17 Show GitHub Exploit DB Packet Storm
210819 5.3 MEDIUM
Network 		treck tcp\/ip The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-11911 2024-11-21 13:58 2020-06-17 Show GitHub Exploit DB Packet Storm
210820 5.3 MEDIUM
Network 		treck tcp\/ip The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. CWE-125
Out-of-bounds Read 		CVE-2020-11910 2024-11-21 13:58 2020-06-17 Show GitHub Exploit DB Packet Storm