Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230391	6	警告	php-update	-	PHP-Update の admin/uploads.php における任意のコードをアップロードおよび実行される脆弱性	-	CVE-2006-6879	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230392	7.5	危険	php-update	-	PHP-Update の admin/uploads.php における権限を取得される脆弱性	-	CVE-2006-6878	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230393	6.8	警告	Zen Cart	-	Zen Cart Web Shopping Cart におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6868	2012-12-20 18:02	2006-12-30	Show	GitHub Exploit DB Packet Storm

230394	7.5	危険	vladimir meshakov	-	Vladimir Menshakov buratinable templator における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6867	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230395	7.8	危険	stphp	-	STphp EasyNews におけるユーザ名などを取得される脆弱性	-	CVE-2006-6866	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230396	7.8	危険	softartisans	-	SAFileUp の SAFileUpSamples/util/viewsrc.asp におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6865	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230397	10	危険	website designs for less	-	Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性	-	CVE-2006-6859	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230398	7.5	危険	webtext	-	WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性	-	CVE-2006-6856	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230399	7.5	危険	shadowed works	-	Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6850	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

230400	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6847	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198201	8.8	HIGH Network	auth0	wp-auth0	Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.	CWE-352 Origin Validation Error	CVE-2020-5391	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198202	7.5	HIGH Network	yamaha	rtx830_firmware nvr510_firmware nvr700w_firmware rtx1210_firmware rtx5000_firmware rtx3500_firmware fwx120_firmware rtx810_firmware nvr500_firmware rtx1200_firmware	Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and ear…	NVD-CWE-noinfo	CVE-2020-5548	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198203	9.8	CRITICAL Network	lifterlms	lifterlms	LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-6008	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198204	7.5	HIGH Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted use…	CWE-89 SQL Injection	CVE-2020-5726	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

198205	5.9	MEDIUM Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login action with a craft…	CWE-89 SQL Injection	CVE-2020-5725	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

198206	7.5	HIGH Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a c…	CWE-89 SQL Injection	CVE-2020-5724	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

198207	9.8	CRITICAL Network	grandstream	ucm6202_firmware ucm6204_firmware ucm6208_firmware	The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-5723	2024-11-21 14:34	2020-03-31	Show	GitHub Exploit DB Packet Storm

198208	7.5	HIGH Network	mitsubishielectric	cr800-q_firmware fx3g_firmware fx3gc_firmware fx3s_firmware fx3u_firmware fx3uc_firmware fx5u_firmware fx5uc_firmware fx5uj_firmware l02cpu_firmware l02cpu-p_firmware	When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), an…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-5527	2024-11-21 14:34	2020-03-30	Show	GitHub Exploit DB Packet Storm

198209	8.8	HIGH Adjacent	toyota	display_control_unit	Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs …	CWE-276 Incorrect Default Permissions	CVE-2020-5551	2024-11-21 14:34	2020-03-30	Show	GitHub Exploit DB Packet Storm

198210	8.6	HIGH Network	f5 netapp	nginx_controller cloud_backup	In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upl…	NVD-CWE-noinfo	CVE-2020-5863	2024-11-21 14:34	2020-03-28	Show	GitHub Exploit DB Packet Storm