Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230301 7.8 危険 サン・マイクロシステムズ - Netra など Solaris が稼動しているシングル CPU Sun システムにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-7028 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
230302 7.5 危険 sangwan kim - Bookmark4U の admin/config.php における SQL インジェクションの脆弱性 - CVE-2006-7025 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
230303 7.5 危険 Plume CMS - Plume CMS の manager/tools/link/dbinstall.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7021 2012-12-20 18:18 2007-02-14 Show GitHub Exploit DB Packet Storm
230304 7.5 危険 phpwcms - phpwcms における任意のコードを実行される脆弱性 - CVE-2006-7019 2012-12-20 18:18 2007-02-14 Show GitHub Exploit DB Packet Storm
230305 7.5 危険 phpjobboard - phpjobboard における認証を回避される脆弱性 - CVE-2006-7016 2012-12-20 18:18 2007-02-14 Show GitHub Exploit DB Packet Storm
230306 10 危険 scart - SCart の scart.cgi における任意のコマンドを実行される脆弱性 - CVE-2006-7012 2012-12-20 18:18 2007-02-14 Show GitHub Exploit DB Packet Storm
230307 4.3 警告 wheatblog - wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7002 2012-12-20 18:18 2007-02-12 Show GitHub Exploit DB Packet Storm
230308 7.1 危険 phpmychat plus - PhpMyChat Plus の avatar.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-7001 2012-12-20 18:18 2007-02-12 Show GitHub Exploit DB Packet Storm
230309 4.3 警告 the war forge - warforge.NEWS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6996 2012-12-20 18:18 2007-02-12 Show GitHub Exploit DB Packet Storm
230310 6 警告 v3chat - V3 Chat の mycontacts.php における他のユーザとして権限を取得される脆弱性 - CVE-2006-6995 2012-12-20 18:18 2007-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197811 7.5 HIGH
Network 		teltonika-networks trb245_firmware Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious backup archive. CWE-20
 Improper Input Validation  		CVE-2020-5771 2024-11-21 14:34 2020-08-4 Show GitHub Exploit DB Packet Storm
197812 8.8 HIGH
Network 		teltonika-networks trb245_firmware Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. CWE-352
 Origin Validation Error 		CVE-2020-5770 2024-11-21 14:34 2020-08-4 Show GitHub Exploit DB Packet Storm
197813 5.7 MEDIUM
Network 		vmware tanzu_application_service_for_virtual_machines
operations_manager 		VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin passwor… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-5414 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
197814 9.8 CRITICAL
Network 		vmware
oracle 		spring_integration
flexcube_private_banking
retail_merchandising_system
banking_virtual_account_management
banking_credit_facilities_process_management
banking_corporate_lending_proces… 		Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on d… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-5413 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
197815 8.8 HIGH
Network 		vmware gemfire
tanzu_gemfire_for_virtual_machines 		VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service … CWE-862
 Missing Authorization 		CVE-2020-5396 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
197816 8.4 HIGH
Local 		rsa multifactor_authentication_agent Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerabil… CWE-287
Improper Authentication 		CVE-2020-5384 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
197817 7.8 HIGH
Local 		toyota global_techstream Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors. CWE-787
 Out-of-bounds Write 		CVE-2020-5610 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197818 8.8 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt. CWE-326
Inadequate Encryption Strength 		CVE-2020-5763 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197819 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a N… CWE-476
 NULL Pointer Dereference 		CVE-2020-5762 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
197820 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by s… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-5761 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm