Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230261	7.5	危険	PHPKIT	-	PHPKit における SQL インジェクションの脆弱性	-	CVE-2006-7115	2012-12-20 18:18	2007-03-5	Show	GitHub Exploit DB Packet Storm

230262	5	警告	planerd.net	-	P-News における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-7114	2012-12-20 18:18	2007-03-5	Show	GitHub Exploit DB Packet Storm

230263	7.5	危険	planerd.net	-	P-News における任意のコードをアップロードおよび実行される脆弱性	CWE-20 不適切な入力確認	CVE-2006-7113	2012-12-20 18:18	2007-03-5	Show	GitHub Exploit DB Packet Storm

230264	7.5	危険	powerphlogger	-	Power Phlogger の config.inc.php3 における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-7106	2012-12-20 18:18	2007-03-3	Show	GitHub Exploit DB Packet Storm

230265	7.5	危険	phpwind	-	PHPWind の admin.php における SQL インジェクションの脆弱性	-	CVE-2006-7101	2012-12-20 18:18	2007-03-3	Show	GitHub Exploit DB Packet Storm

230266	6.8	警告	phpBB	-	phpBB Insert User の includes/functions_mod_user.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-7100	2012-12-20 18:18	2007-03-3	Show	GitHub Exploit DB Packet Storm

230267	5	警告	solarpay	-	SolarPay の index.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-7099	2012-12-20 18:18	2007-03-3	Show	GitHub Exploit DB Packet Storm

230268	10	危険	taskfreak	-	TaskFreak! における脆弱性	-	CVE-2006-7097	2012-12-20 18:18	2007-03-2	Show	GitHub Exploit DB Packet Storm

230269	6.8	警告	phpbb security	-	phpBB Security の phpbb_security.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-7090	2012-12-20 18:18	2007-03-2	Show	GitHub Exploit DB Packet Storm

230270	7.5	危険	simple php forum	-	Simple PHP Forum における SQL インジェクションの脆弱性	-	CVE-2006-7088	2012-12-20 18:18	2007-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197851	7.5	HIGH Network	dell	emc_powerstore_1000_firmware emc_powerstore_3000_firmware emc_powerstore_5000_firmware emc_powerstore_7000_firmware emc_powerstore_9000_firmware	Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of …	CWE-863 Incorrect Authorization	CVE-2020-5372	2024-11-21 14:34	2020-07-7	Show	GitHub Exploit DB Packet Storm

197852	8.8	HIGH Network	dell	emc_isilon_onefs emc_powerscale_onefs	Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage o…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-5371	2024-11-21 14:34	2020-07-7	Show	GitHub Exploit DB Packet Storm

197853	7.5	HIGH Network	dell	vxrail_d560f_firmware vxrail_d560_firmware	Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an e…	CWE-862 Missing Authorization	CVE-2020-5368	2024-11-21 14:34	2020-07-7	Show	GitHub Exploit DB Packet Storm

197854	7.3	HIGH Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system.	NVD-CWE-noinfo	CVE-2020-5911	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197855	7.5	HIGH Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any succe…	CWE-306 Missing Authentication for Critical Function	CVE-2020-5910	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197856	5.4	MEDIUM Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.	CWE-295 Improper Certificate Validation	CVE-2020-5909	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197857	5.5	MEDIUM Local	f5	big-ip_access_policy_manager	In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-5908	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197858	7.2	HIGH Network	f5	big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell (tmsh) may be able to conduc…	NVD-CWE-noinfo	CVE-2020-5907	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197859	8.1	HIGH Network	f5	big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not properly enforce the access controls for the scp.blacklist files. This allows Admin and Resource Admin us…	CWE-276 Incorrect Default Permissions	CVE-2020-5906	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197860	9.6	CRITICAL Network	f5	nginx_controller	In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result in a complete compro…	CWE-79 Cross-site Scripting	CVE-2020-5901	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed