Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230301 10 危険 phpBB - phpBB の Dimension モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7174 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
230302 10 危険 php-stats - PHP-Stats の admin.php における任意の PHP コードを実行される脆弱性 - CVE-2006-7173 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230303 7.5 危険 php-stats - PHP-Stats の php-stats.recphp.php における SQL インジェクションの脆弱性 - CVE-2006-7172 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230304 6.8 警告 PHP Outburst - UPB の includes/header_simple.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7169 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230305 7.5 危険 prorat - ProRat Server におけるリモートログインに対する認証メカニズムを回避される脆弱性 - CVE-2006-7167 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230306 1.9 注意 レッドハット - RHEL のカーネルにおける虚偽の成功ステータスを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-0004 2012-12-20 18:19 2006-07-21 Show GitHub Exploit DB Packet Storm
230307 6.5 警告 XWiki - XWiki の PreviewAction における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7223 2012-12-20 18:19 2006-10-11 Show GitHub Exploit DB Packet Storm
230308 7.5 危険 Sendmail Consortium - Red Hat Enterprise Linux 上で稼動する Sendmail における想定より少ないセキュアチャネルが使用される脆弱性 - CVE-2006-7175 2012-12-20 18:19 2005-11-3 Show GitHub Exploit DB Packet Storm
230309 1.9 注意 Simon Tatham - PuTTY における重要な情報を取得される脆弱性 - CVE-2006-7162 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
230310 10 危険 phpBB - Brazilian PHPBB の maluinfo における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7148 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197861 7.5 HIGH
Network 		mitsubishielectric melsec_iq-r00_firmware
melsec_iq-r01_firmware
melsec_iq-r02_firmware
melsec_iq-r04_firmware
melsec_iq-r16_firmware
melsec_iq-r08_firmware
melsec_iq-r32_firmware
melsec_iq-r120_fi… 		Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') al… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5666 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
197862 7.8 HIGH
Local 		nagios nagios_xi Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to… CWE-281
 Improper Preservation of Permissions 		CVE-2020-5796 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
197863 7.5 HIGH
Network 		valvesoftware game_networking_sockets Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from li… NVD-CWE-noinfo
CVE-2020-6019 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
197864 7.8 HIGH
Local 		nvidia geforce_now NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to bin… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-5992 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
197865 9.8 CRITICAL
Network 		vmware pivotal_scheduler Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5426 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
197866 6.9 MEDIUM
Physics 		dell inspiron_15_7579_firmware Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-5388 2024-11-21 14:34 2020-11-11 Show GitHub Exploit DB Packet Storm
197867 7.8 HIGH
Local 		tenable nessus_network_monitor A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a spe… NVD-CWE-noinfo
CVE-2020-5794 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
197868 6.2 MEDIUM
Physics 		tp-link archer_a7_firmware UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a craft… CWE-59
Link Following 		CVE-2020-5795 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
197869 5.5 MEDIUM
Local 		wantedlyinc studyplus Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external … CWE-798
 Use of Hard-coded Credentials 		CVE-2020-5667 2024-11-21 14:34 2020-11-6 Show GitHub Exploit DB Packet Storm
197870 6.5 MEDIUM
Network 		cybozu garoon Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector. CWE-20
 Improper Input Validation  		CVE-2020-5643 2024-11-21 14:34 2020-11-6 Show GitHub Exploit DB Packet Storm