Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230711	10	危険	tufat	-	FlashBB の phpbb/getmsg.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-7032	2012-12-20 18:18	2007-02-22	Show	GitHub Exploit DB Packet Storm

230712	7.8	危険	サン・マイクロシステムズ	-	Netra など Solaris が稼動しているシングル CPU Sun システムにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-7028	2012-12-20 18:18	2007-02-22	Show	GitHub Exploit DB Packet Storm

230713	7.5	危険	sangwan kim	-	Bookmark4U の admin/config.php における SQL インジェクションの脆弱性	-	CVE-2006-7025	2012-12-20 18:18	2007-02-22	Show	GitHub Exploit DB Packet Storm

230714	7.5	危険	Plume CMS	-	Plume CMS の manager/tools/link/dbinstall.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-7021	2012-12-20 18:18	2007-02-14	Show	GitHub Exploit DB Packet Storm

230715	7.5	危険	phpwcms	-	phpwcms における任意のコードを実行される脆弱性	-	CVE-2006-7019	2012-12-20 18:18	2007-02-14	Show	GitHub Exploit DB Packet Storm

230716	7.5	危険	phpjobboard	-	phpjobboard における認証を回避される脆弱性	-	CVE-2006-7016	2012-12-20 18:18	2007-02-14	Show	GitHub Exploit DB Packet Storm

230717	10	危険	scart	-	SCart の scart.cgi における任意のコマンドを実行される脆弱性	-	CVE-2006-7012	2012-12-20 18:18	2007-02-14	Show	GitHub Exploit DB Packet Storm

230718	4.3	警告	wheatblog	-	wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-7002	2012-12-20 18:18	2007-02-12	Show	GitHub Exploit DB Packet Storm

230719	7.1	危険	phpmychat plus	-	PhpMyChat Plus の avatar.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-7001	2012-12-20 18:18	2007-02-12	Show	GitHub Exploit DB Packet Storm

230720	4.3	警告	the war forge	-	warforge.NEWS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6996	2012-12-20 18:18	2007-02-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198761	8.1	HIGH Network	plathome	easyblocks_ipv6_firmware easyblocks_ipv6_enterprise_firmware	Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management cons…	CWE-384 Session Fixation	CVE-2020-5550	2024-11-21 14:34	2020-04-8	Show	GitHub Exploit DB Packet Storm

198762	8.8	HIGH Network	plathome	easyblocks_ipv6_firmware easyblocks_ipv6_enterprise_firmware	Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators …	CWE-352 Origin Validation Error	CVE-2020-5549	2024-11-21 14:34	2020-04-8	Show	GitHub Exploit DB Packet Storm

198763	8.8	HIGH Network	amcrest	1080-lite_8ch_firmware amdv10814-h5_firmware ipm-721_firmware ip2m-841_firmware ip2m-841-v3_firmware ip2m-853ew_firmware ip2m-858w_firmware ip2m-866w_firmware ip2m-866ew_firmw…	Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.	CWE-787 Out-of-bounds Write	CVE-2020-5735	2024-11-21 14:34	2020-04-8	Show	GitHub Exploit DB Packet Storm

198764	7.5	HIGH Network	solarwinds	dameware	Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange.	CWE-120 Classic Buffer Overflow	CVE-2020-5734	2024-11-21 14:34	2020-04-7	Show	GitHub Exploit DB Packet Storm

198765	7.8	HIGH Local	symantec	data_center_security	Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to …	NVD-CWE-noinfo	CVE-2020-5832	2024-11-21 14:34	2020-04-7	Show	GitHub Exploit DB Packet Storm

198766	9.8	CRITICAL Network	learndash	learndash	LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-6009	2024-11-21 14:34	2020-04-2	Show	GitHub Exploit DB Packet Storm

198767	6.1	MEDIUM Network	auth0	wp-auth0	A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.	CWE-79 Cross-site Scripting	CVE-2020-5392	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198768	8.8	HIGH Network	auth0	wp-auth0	Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.	CWE-352 Origin Validation Error	CVE-2020-5391	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198769	7.5	HIGH Network	yamaha	rtx830_firmware nvr510_firmware nvr700w_firmware rtx1210_firmware rtx5000_firmware rtx3500_firmware fwx120_firmware rtx810_firmware nvr500_firmware rtx1200_firmware	Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and ear…	NVD-CWE-noinfo	CVE-2020-5548	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

198770	9.8	CRITICAL Network	lifterlms	lifterlms	LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-6008	2024-11-21 14:34	2020-04-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed