Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230471 4.3 警告 Ykoon B.V.  - Ykoon RssReader におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4762 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230472 3.6 注意 PunBB - PunBB におけるコードを実行される脆弱性 - CVE-2006-4759 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230473 4.6 警告 phpBB - phpBB における任意のファイルをアップロードされる脆弱性 - CVE-2006-4758 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230474 7.5 危険 phpmydirectory - phpMyDirectory の alpha.php における SQL インジェクションの脆弱性 - CVE-2006-4756 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230475 4.3 警告 phpmydirectory - phpMyDirectory の alpha.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4755 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230476 3.6 注意 scarybear - ScaryBear PocketExpense Pro における認証を無効にされる脆弱性 - CVE-2006-4745 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230477 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 - CVE-2006-4743 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230478 7.5 危険 Tiki Software Community Association - Tikiwiki の tiki-g-admin_processes.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4734 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230479 7.5 危険 sips - Haakon Nilsen simple などの sipssys/code/box.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4733 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230480 4.3 警告 tumbleweed - Tumbleweed EMF Administration Module の emfadmin/statusView.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-4727 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212221 6.1 MEDIUM
Network 		munkireport_project munkireport An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/broken_client endpoint. The payload will be executed by any authen… CWE-79
Cross-site Scripting 		CVE-2020-10192 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
212222 5.4 MEDIUM
Network 		munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /module/comment/save endpoint. The payload will be executed by any authenticated … CWE-79
Cross-site Scripting 		CVE-2020-10191 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
212223 8.8 HIGH
Network 		munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint. CWE-89
SQL Injection 		CVE-2020-10190 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
212224 8.1 HIGH
Network 		gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document. CWE-787
 Out-of-bounds Write 		CVE-2020-10223 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
212225 8.1 HIGH
Network 		gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. NVD-CWE-noinfo
CVE-2020-10222 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
212226 8.8 HIGH
Network 		rconfig rconfig lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. CWE-78
OS Command  		CVE-2020-10221 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
212227 9.8 CRITICAL
Network 		rconfig rconfig An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. CWE-89
SQL Injection 		CVE-2020-10220 2024-11-21 13:54 2020-03-8 Show GitHub Exploit DB Packet Storm
212228 8.8 HIGH
Network 		dlink
trendnet 		dir-825_firmware
tew-632brp_firmware 		An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1… CWE-78
OS Command  		CVE-2020-10216 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
212229 8.8 HIGH
Network 		dlink
trendnet 		dir-825_firmware
tew-632brp_firmware 		An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-… CWE-78
OS Command  		CVE-2020-10215 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
212230 8.8 HIGH
Network 		dlink dir-825_firmware An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_s… CWE-787
 Out-of-bounds Write 		CVE-2020-10214 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm