Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230321 7.5 危険 xmb software - XMB の u2u.inc.php における SQL インジェクションの脆弱性 - CVE-2006-3994 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
230322 5.1 警告 tsep - Olaf Noehring TSEP の copyright.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3993 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
230323 7.5 危険 voc-project - Cisco Unified Wireless IP Phone 7921 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3991 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
230324 7.5 危険 phpsavant - Paul M. Jones Savant2 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3990 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
230325 5 警告 scott weedon - Scott Weedon Ajax Chat の visitor/livesupport/chat.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3972 2012-12-20 18:02 2006-08-2 Show GitHub Exploit DB Packet Storm
230326 6.8 警告 scott weedon - Scott Weedon Ajax Chat の visitor/livesupport/chat.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3971 2012-12-20 18:02 2006-08-2 Show GitHub Exploit DB Packet Storm
230327 5 警告 サン・マイクロシステムズ - Sun Solaris 10 3/05 HW2 の暗号化プロバイダにおけるアプリケーションがデータ変更を検出しない脆弱性 - CVE-2006-3968 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
230328 7.5 危険 x-scripts - X-Scripts X-Poll の top.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-3960 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
230329 7.5 危険 x-scripts - X-Scripts X-Protection の protect.php における SQL インジェクションの脆弱性 - CVE-2006-3959 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
230330 4.3 警告 pkr internet - Taskjitsu におけるクロスサイトスクリプティングの脆弱性 CWE-noinfo
情報不足 		CVE-2006-3958 2012-12-20 18:02 2006-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212151 7.8 HIGH
Local 		google android In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe… CWE-787
 Out-of-bounds Write 		CVE-2020-0094 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212152 5.0 MEDIUM
Local 		google
debian
canonical
libexif_project
opensuse 		android
debian_linux
ubuntu_linux
libexif
leap 		In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile… CWE-125
Out-of-bounds Read 		CVE-2020-0093 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212153 5.0 MEDIUM
Local 		google android In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosur… CWE-200
Information Exposure 		CVE-2020-0092 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212154 5.5 MEDIUM
Local 		google android In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 NVD-CWE-noinfo
CVE-2020-0091 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212155 5.5 MEDIUM
Local 		google android An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 NVD-CWE-noinfo
CVE-2020-0090 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212156 5.5 MEDIUM
Local 		google android An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448 NVD-CWE-noinfo
CVE-2020-0065 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212157 5.5 MEDIUM
Local 		google android An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855 NVD-CWE-noinfo
CVE-2020-0064 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212158 7.8 HIGH
Local 		google android In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execut… CWE-276
Incorrect Default Permissions  		CVE-2020-0024 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
212159 8.1 HIGH
Network 		dahuasecurity sd6al_firmware
sd5a_firmware
sd1a_firmware
ptz1a_firmware
sd50_firmware
sd52c_firmware
ipc-hx5842h_firmware
ipc-hx7842h_firmware
ipc-hx2xxx_firmware
ipc-hxxx5x4x_firmware 		Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak securi… CWE-276
Incorrect Default Permissions  		CVE-2019-9682 2024-11-21 13:52 2020-05-14 Show GitHub Exploit DB Packet Storm
212160 7.8 HIGH
Local 		google android In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server … CWE-502
 Deserialization of Untrusted Data 		CVE-2020-0082 2024-11-21 13:52 2020-04-18 Show GitHub Exploit DB Packet Storm