Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230681	7.5	危険	mamboxchange	-	a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3930	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230682	4.3	警告	ZyXEL	-	Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3929	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230683	7.5	危険	mikael software	-	WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3928	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230684	4.3	警告	phpprobid	-	PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3927	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230685	7.5	危険	phpprobid	-	PhpProBid における SQL インジェクションの脆弱性	-	CVE-2006-3926	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230686	6.4	警告	interactual technologies	-	InterActual Player の iarecord.dll におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3925	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

230687	2.6	注意	fire-mouse	-	Fire-Mouse Toplist の add.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3923	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

230688	7.5	危険	portailphp	-	PortailPHP の mod_membre/inscription.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3922	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

230689	7.5	危険	sd studio	-	SD Studio CMS の index.php における SQL インジェクションの脆弱性	-	CVE-2006-3919	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230690	7.5	危険	r. corson	-	R. Corson PHP Forge の inc/gabarits.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3917	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211731	7.8	HIGH Local	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root accoun…	CWE-269 Improper Privilege Management	CVE-2020-10384	2024-11-21 13:55	2020-04-15	Show	GitHub Exploit DB Packet Storm

211732	9.8	CRITICAL Network	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.	NVD-CWE-noinfo	CVE-2020-10383	2024-11-21 13:55	2020-04-15	Show	GitHub Exploit DB Packet Storm

211733	8.8	HIGH Network	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler.	NVD-CWE-noinfo	CVE-2020-10382	2024-11-21 13:55	2020-04-15	Show	GitHub Exploit DB Packet Storm

211734	5.3	MEDIUM Network	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discove…	CWE-89 SQL Injection	CVE-2020-10381	2024-11-21 13:55	2020-04-15	Show	GitHub Exploit DB Packet Storm

211735	7.8	HIGH Local	fujielectric	v-server	Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small.	CWE-787 Out-of-bounds Write	CVE-2020-10646	2024-11-21 13:55	2020-04-14	Show	GitHub Exploit DB Packet Storm

211736	7.8	HIGH Local	rockwellautomation	rslinx_classic	In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privile…	-	CVE-2020-10642	2024-11-21 13:55	2020-04-14	Show	GitHub Exploit DB Packet Storm

211737	9.8	CRITICAL Network	advantech	webaccess\/nms	An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.	CWE-22 Path Traversal	CVE-2020-10631	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

211738	7.5	HIGH Network	advantech	webaccess\/nms	WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.	CWE-611 XXE	CVE-2020-10629	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

211739	9.8	CRITICAL Network	advantech	webaccess\/nms	WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.	CWE-306 Missing Authentication for Critical Function	CVE-2020-10625	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

211740	6.5	MEDIUM Network	advantech	webaccess\/nms	Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.	CWE-89 SQL Injection	CVE-2020-10623	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm