Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230351 7.8 危険 softinform - FineBrowser Freeware における他のドメインから制限された情報をアクセスされる脆弱性 - CVE-2006-6987 2012-12-20 18:18 2007-02-8 Show GitHub Exploit DB Packet Storm
230352 7.5 危険 phpgraphy - phpGraphy における任意の PHP コードを実行される脆弱性 - CVE-2006-6966 2012-12-20 18:18 2007-02-3 Show GitHub Exploit DB Packet Storm
230353 6.8 警告 ウェブルート株式会社 - WebRoot Spy Sweeper におけるマルウェアを回避される脆弱性 - CVE-2006-6961 2012-12-20 18:18 2007-01-29 Show GitHub Exploit DB Packet Storm
230354 6.8 警告 ウェブルート株式会社 - WebRoot Spy Sweeper の Compression Sweep 機能におけるマルウェアの検出を回避される脆弱性 - CVE-2006-6960 2012-12-20 18:18 2007-01-29 Show GitHub Exploit DB Packet Storm
230355 4.6 警告 ウェブルート株式会社 - WebRoot Spy Sweeper における "スタートアップシールド" セキュリティ制限を回避される脆弱性 - CVE-2006-6959 2012-12-20 18:18 2007-01-29 Show GitHub Exploit DB Packet Storm
230356 7.5 危険 php blue dragon - phpBlueDragon における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6958 2012-12-20 18:18 2007-01-29 Show GitHub Exploit DB Packet Storm
230357 7.5 危険 VirtueMart - Virtuemart における SQL インジェクションの脆弱性 - CVE-2006-6945 2012-12-20 18:18 2007-01-19 Show GitHub Exploit DB Packet Storm
230358 7.5 危険 The phpMyAdmin Project - phpMyAdmin におけるアクセスルールを回避される脆弱性 - CVE-2006-6944 2012-12-20 18:18 2007-01-17 Show GitHub Exploit DB Packet Storm
230359 5 警告 The phpMyAdmin Project - PhpMyAdmin におけるサーバのフルパスを取得される脆弱性 - CVE-2006-6943 2012-12-20 18:18 2007-01-17 Show GitHub Exploit DB Packet Storm
230360 6.8 警告 The phpMyAdmin Project - PhpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6942 2012-12-20 18:18 2007-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198241 8.8 HIGH
Adjacent 		plathome openblocks_iot_vx2_firmware OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors. CWE-287
Improper Authentication 		CVE-2020-5536 2024-11-21 14:34 2020-03-4 Show GitHub Exploit DB Packet Storm
198242 8.8 HIGH
Adjacent 		plathome openblocks_iot_vx2_firmware OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. CWE-78
OS Command  		CVE-2020-5535 2024-11-21 14:34 2020-03-4 Show GitHub Exploit DB Packet Storm
198243 7.5 HIGH
Network 		pivotal reactor_netty Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-5403 2024-11-21 14:34 2020-03-4 Show GitHub Exploit DB Packet Storm
198244 5.9 MEDIUM
Network 		pivotal reactor_netty The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. I… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-5404 2024-11-21 14:34 2020-03-4 Show GitHub Exploit DB Packet Storm
198245 6.5 MEDIUM
Network 		grandit grandit GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the informa… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-5539 2024-11-21 14:34 2020-03-2 Show GitHub Exploit DB Packet Storm
198246 8.8 HIGH
Network 		cloudfoundry cf-deployment
user_account_and_authentication 		In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity pr… CWE-352
 Origin Validation Error 		CVE-2020-5402 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
198247 5.3 MEDIUM
Network 		cloudfoundry routing_release Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients try… CWE-444
HTTP Request Smuggling 		CVE-2020-5401 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
198248 6.5 MEDIUM
Network 		cloudfoundry cf-deployment
capi-release 		Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the j… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-5400 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
198249 8.8 HIGH
Adjacent 		nec aterm_wg2600hs_firmware
aterm_wf1200c_firmware
aterm_wg1200cr_firmware 		Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment t… CWE-78
OS Command  		CVE-2020-5524 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm
198250 8.0 HIGH
Adjacent 		nec aterm_wg2600hs_firmware Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. CWE-78
OS Command  		CVE-2020-5534 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm