Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230781 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher の viewarticle.asp における SQL インジェクションの脆弱性 - CVE-2006-5888 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
230782 5.1 警告 pstotext - pstotext における任意のコマンドを実行される脆弱性 - CVE-2006-5869 2012-12-20 18:02 2006-11-26 Show GitHub Exploit DB Packet Storm
230783 6.4 警告 phpmanta - phpManta の Mdoc/view-sourcecode.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5866 2012-12-20 18:02 2006-11-10 Show GitHub Exploit DB Packet Storm
230784 6.5 警告 speedywiki - Speedywiki の index.php における任意の PHP コードをアップロードされる脆弱性 - CVE-2006-5845 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230785 5 警告 speedywiki - Speedywiki における Web サーバのフルパスを取得される脆弱性 - CVE-2006-5844 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230786 6.8 警告 speedywiki - Speedywiki の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5843 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230787 2.1 注意 unicore - Unicore Client の keystore ファイルにおける重要な情報を取得される脆弱性 - CVE-2006-5842 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230788 7.5 危険 phpadventure - PHPAdventure の ad_main.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5839 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230789 7.5 危険 simplechat - iWare Professional CMS 用の SimpleChat モジュールにおける chat_log.php へ任意の PHP コードを挿入される脆弱性 - CVE-2006-5837 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
230790 6.8 警告 phpComasy - phpComasy CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5827 2012-12-20 18:02 2006-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212431 5.5 MEDIUM
Local
hdfgroup hdf5 An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service. CWE-476
 NULL Pointer Dereference
CVE-2020-10812 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212432 5.5 MEDIUM
Local
hdfgroup hdf5 An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service. CWE-125
Out-of-bounds Read
CVE-2020-10811 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212433 5.5 MEDIUM
Local
hdfgroup hdf5 An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service. CWE-476
 NULL Pointer Dereference
CVE-2020-10810 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212434 5.5 MEDIUM
Local
hdfgroup hdf5 An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 b… CWE-787
 Out-of-bounds Write
CVE-2020-10809 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212435 8.8 HIGH
Network
vestacp vesta_control_panel Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demon… CWE-78
OS Command 
CVE-2020-10808 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212436 5.3 MEDIUM
Network
mitre caldera auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header. CWE-290
 Authentication Bypass by Spoofing
CVE-2020-10807 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212437 9.8 CRITICAL
Network
ez ez_publish-kernel
ez_publish-legacy
eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to ex… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-10806 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
212438 5.4 MEDIUM
Network
phpmyadmin
debian
fedoraproject
opensuse
suse
phpmyadmin
debian_linux
fedora
leap
backports_sle
package_hub
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results… CWE-79
CWE-89
Cross-site Scripting
SQL Injection
CVE-2020-10803 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
212439 8.0 HIGH
Network
phpmyadmin
debian
fedoraproject
opensuse
suse
phpmyadmin
debian_linux
fedora
leap
backports_sle
package_hub
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search act… CWE-89
SQL Injection
CVE-2020-10802 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
212440 8.0 HIGH
Network
phpmyadmin
fedoraproject
opensuse
suse
phpmyadmin
fedora
leap
backports_sle
package_hub
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/Use… CWE-89
SQL Injection
CVE-2020-10804 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm