Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230331 7.5 危険 redaction system - Redaction System における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5302 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
230332 6.8 警告 phpBB - phpBB 用の SpamBlockerMODv モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5301 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
230333 4.3 警告 Tincan - phplist の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5294 2012-12-20 18:02 2006-10-16 Show GitHub Exploit DB Packet Storm
230334 6.8 警告 phpoutsourcing - PhpOutsourcing Noah's Classifieds の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5293 2012-12-20 18:02 2006-10-16 Show GitHub Exploit DB Packet Storm
230335 7.5 危険 Xerox - Xerox WorkCentre における認証を回避される脆弱性 - CVE-2006-5290 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230336 7.5 危険 Vtiger - Vtiger CRM における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5289 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
230337 5.1 警告 xeobook - Xeobook の sign.php における SQL インジェクションの脆弱性 - CVE-2006-5287 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
230338 7.5 危険 xeoport - XeoPort の index.php における SQL インジェクションの脆弱性 - CVE-2006-5285 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
230339 7.5 危険 sh-news - SH-News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5282 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
230340 7.5 危険 phpmyagenda - phpMyAgenda の templates/header.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5263 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211131 7.0 HIGH
Local
qualcomm agatti_firmware
apq8053_firmware
bitra_firmware
ipq4019_firmware
ipq5018_firmware
ipq6018_firmware
ipq8064_firmware
ipq8074_firmware
kamorta_firmware
mdm9607_firmware
ms…
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-11173 2024-11-21 13:57 2020-11-2 Show GitHub Exploit DB Packet Storm
211132 9.1 CRITICAL
Network
qualcomm apq8009_firmware
apq8053_firmware
qca6390_firmware
qcn7605_firmware
qcn7606_firmware
sa415m_firmware
sa515m_firmware
sa6155p_firmware
sa8155p_firmware
sc8180x_firmware
s…
u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Conne… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound
CVE-2020-11169 2024-11-21 13:57 2020-11-2 Show GitHub Exploit DB Packet Storm
211133 6.7 MEDIUM
Local
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-11488 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211134 7.5 HIGH
Network
intel bmc_firmware NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerabil… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11487 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211135 9.8 CRITICAL
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-11486 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211136 8.8 HIGH
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not suf… CWE-352
 Origin Validation Error
CVE-2020-11485 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211137 4.9 MEDIUM
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of … NVD-CWE-noinfo
CVE-2020-11484 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211138 9.8 CRITICAL
Network
intel bmc_firmware NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firm… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11483 2024-11-21 13:57 2020-10-29 Show GitHub Exploit DB Packet Storm
211139 7.2 HIGH
Network
concretecms concrete_cms Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-11476 2024-11-21 13:57 2020-07-29 Show GitHub Exploit DB Packet Storm
211140 7.8 HIGH
Local
ncp-e secure_enterprise_client NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant. CWE-59
Link Following
CVE-2020-11474 2024-11-21 13:57 2020-07-29 Show GitHub Exploit DB Packet Storm