Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230381	2.9	注意	sony ericsson	-	Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性	-	CVE-2006-6895	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230382	10	危険	spine	-	SPINE における脆弱性	-	CVE-2006-6894	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230383	5	警告	The Tor Project	-	Tor における非表示サービスの IP アドレスを特定される脆弱性	-	CVE-2006-6893	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230384	5	警告	vz forum	-	Adp Forum における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6891	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230385	7.5	危険	voc-project	-	Voodoo chat におけるパスワードをダウンロードされる脆弱性	-	CVE-2006-6890	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230386	5	警告	p-news	-	P-News における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6888	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230387	5	警告	phpwcms	-	phpwcms における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2006-6886	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230388	9.3	危険	winzip	-	WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6884	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230389	7.5	危険	stavros markou	-	ATMEL Linux PCI PCMCIA USB Drivers drivers の cofvnet.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-6881	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230390	7.5	危険	php-update	-	PHP-Update の code/guestadd.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-6880	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197811	9.1	CRITICAL Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7048	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

197812	8.8	HIGH Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users …	CWE-269 Improper Privilege Management	CVE-2020-7047	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

197813	5.4	MEDIUM Network	learndash	learndash	The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.	CWE-79 Cross-site Scripting	CVE-2020-7108	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197814	6.1	MEDIUM Network	etoilewebdesign	ultimate_faq	The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.	CWE-79 Cross-site Scripting	CVE-2020-7107	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197815	6.1	MEDIUM Network	cacti debian opensuse suse fedoraproject	cacti debian_linux leap backports_sle package_hub fedora extra_packages_for_enterprise_linux	Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the descrip…	CWE-79 Cross-site Scripting	CVE-2020-7106	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197816	7.5	HIGH Network	redislabs debian fedoraproject	hiredis debian_linux fedora	async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.	CWE-476 NULL Pointer Dereference	CVE-2020-7105	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197817	6.5	MEDIUM Adjacent	wireshark debian	wireshark debian_linux	In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.	CWE-476 NULL Pointer Dereference	CVE-2020-7045	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197818	7.5	HIGH Network	wireshark fedoraproject opensuse oracle	wireshark fedora leap solaris zfs_storage_appliance_kit	In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.	CWE-125 CWE-193 Out-of-bounds Read Off-by-one Error	CVE-2020-7044	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

197819	8.8	HIGH Network	cacti	cacti	data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.	CWE-20 Improper Input Validation	CVE-2020-7058	2024-11-21 14:36	2020-01-15	Show	GitHub Exploit DB Packet Storm

197820	5.3	MEDIUM Network	hikvision	ds-7204hghi-f1_firmware	Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-7057	2024-11-21 14:36	2020-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed