Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230251 7.5 危険 unisor cms - UNISOR CMS の login.asp における SQL インジェクションの脆弱性 - CVE-2006-5628 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230252 7.5 危険 qnecms - QnECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5627 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230253 4.3 警告 phpfaber - phpFaber CMS の cms_images/js/htmlarea/htmlarea.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5626 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230254 7.5 危険 thepeak - Thepeak File Upload Manager の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5617 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230255 7.5 危険 Textpattern - Textpattern の publish.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5615 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230256 10 危険 東芝 - Toshiba Bluetooth スタックにおける脆弱性 CWE-noinfo
情報不足
CVE-2006-5611 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230257 5 警告 TorrentFlux - TorrentFlux の dir.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5609 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230258 6.8 警告 phpcards - phpCards の phpcards.footer.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5605 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230259 7.5 危険 phpcards - phpCards の phpcards.header.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5604 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
230260 7.5 危険 Snitz - Snitz Forums 2000 の pop_mail.asp における SQL インジェクションの脆弱性 - CVE-2006-5603 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211151 6.5 MEDIUM
Network
redhat cloudforms Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right cri… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2020-10779 2024-11-21 13:56 2020-08-11 Show GitHub Exploit DB Packet Storm
211152 6.0 MEDIUM
Network
redhat cloudforms In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This busines… CWE-669
 Incorrect Resource Transfer Between Spheres
CVE-2020-10778 2024-11-21 13:56 2020-08-11 Show GitHub Exploit DB Packet Storm
211153 5.4 MEDIUM
Network
redhat cloudforms A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS attack on an application administrator using Clou… CWE-79
Cross-site Scripting
CVE-2020-10777 2024-11-21 13:56 2020-08-11 Show GitHub Exploit DB Packet Storm
211154 4.8 MEDIUM
Network
gambio gambio_gx Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php. CWE-79
Cross-site Scripting
CVE-2020-10985 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211155 8.8 HIGH
Network
gambio gambio_gx Gambio GX before 4.0.1.0 allows admin/admin.php CSRF. CWE-352
 Origin Validation Error
CVE-2020-10984 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211156 4.9 MEDIUM
Network
gambio gambio_gx Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php. CWE-89
SQL Injection
CVE-2020-10983 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211157 4.9 MEDIUM
Network
gambio gambio_gx Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php. CWE-89
SQL Injection
CVE-2020-10982 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211158 6.5 MEDIUM
Adjacent
netgear r6700_firmware This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit … NVD-CWE-Other
CVE-2020-10930 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211159 8.8 HIGH
Adjacent
netgear r6700_firmware This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vul… CWE-190
 Integer Overflow or Wraparound
CVE-2020-10929 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm
211160 8.4 HIGH
Local
netgear r6700_firmware This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vul… - CVE-2020-10928 2024-11-21 13:56 2020-07-29 Show GitHub Exploit DB Packet Storm