Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230821 5 警告 walter beschmout - Walter Beschmout PhpQuiz の back/upload_img.php などにおける任意の PHP コードをアップロードされる脆弱性 - CVE-2006-4977 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230822 2.6 注意 Yahoo! - WAP 用の Yahoo! Messenger における任意の Web スクリプトまたは HTML を挿入される脆弱性 - CVE-2006-4975 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230823 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro の enc/content.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4970 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230824 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4969 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230825 7.5 危険 postnuke software foundation - PNphpBB の includes/functions_admin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4968 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230826 5 警告 サン・マイクロシステムズ - SSGD におけるホスト名などを含む重要な情報を取得される脆弱性 - CVE-2006-4959 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230827 6.8 警告 サン・マイクロシステムズ - SSGD におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4958 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230828 7.5 危険 the myreview system - MyReview の functions.php における SQL インジェクションの脆弱性 - CVE-2006-4957 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230829 7.5 危険 prosysinfo - ProSysInfo TFTP Server TFTPDWIN の tftpd.exe におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4948 2012-12-20 18:02 2006-09-22 Show GitHub Exploit DB Packet Storm
230830 4.6 警告 シマンテック - Symantec AntiVirus などの製品で使用される NAVENG などのデバイスドライバにおける権限を取得される脆弱性 - CVE-2006-4927 2012-12-20 18:02 2006-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211681 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn533a8_firmware
wn551k1_firmware
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configurati… CWE-306
Missing Authentication for Critical Function
CVE-2020-10973 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211682 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn572hg3_firmware
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a ce… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2020-10972 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211683 8.8 HIGH
Network
wavlink wl-wn575a3_firmware
wl-wn530hg4_firmware
wl-wn579g3_firmware
An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the… CWE-20
 Improper Input Validation 
CVE-2020-10971 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211684 5.4 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with conte… CWE-79
Cross-site Scripting
CVE-2020-11036 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211685 9.3 CRITICAL
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values.… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11035 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211686 6.1 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6. CWE-601
Open Redirect
CVE-2020-11034 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211687 7.2 HIGH
Network
glpi-project glpi In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6. CWE-89
SQL Injection
CVE-2020-11032 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211688 6.5 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. CWE-22
Path Traversal
CVE-2020-10859 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211689 7.2 HIGH
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All ap… CWE-200
Information Exposure
CVE-2020-11033 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211690 4.8 MEDIUM
Network
requarks wiki.js In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another edit… CWE-79
Cross-site Scripting
CVE-2020-11051 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm