Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230911 5 警告 web-app.net - web-app.net WebAPP の cgi-lib/subs.pl におけるリストファイルをオープンされる脆弱性 - CVE-2006-7186 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
230912 10 危険 phpBB - phpBB の Dimension モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7174 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
230913 10 危険 php-stats - PHP-Stats の admin.php における任意の PHP コードを実行される脆弱性 - CVE-2006-7173 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230914 7.5 危険 php-stats - PHP-Stats の php-stats.recphp.php における SQL インジェクションの脆弱性 - CVE-2006-7172 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230915 6.8 警告 PHP Outburst - UPB の includes/header_simple.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7169 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230916 7.5 危険 prorat - ProRat Server におけるリモートログインに対する認証メカニズムを回避される脆弱性 - CVE-2006-7167 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
230917 1.9 注意 レッドハット - RHEL のカーネルにおける虚偽の成功ステータスを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-0004 2012-12-20 18:19 2006-07-21 Show GitHub Exploit DB Packet Storm
230918 6.5 警告 XWiki - XWiki の PreviewAction における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7223 2012-12-20 18:19 2006-10-11 Show GitHub Exploit DB Packet Storm
230919 7.5 危険 Sendmail Consortium - Red Hat Enterprise Linux 上で稼動する Sendmail における想定より少ないセキュアチャネルが使用される脆弱性 - CVE-2006-7175 2012-12-20 18:19 2005-11-3 Show GitHub Exploit DB Packet Storm
230920 1.9 注意 Simon Tatham - PuTTY における重要な情報を取得される脆弱性 - CVE-2006-7162 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211061 7.5 HIGH
Network 		mi ax1800_firmware
rm1800_firmware 		The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800… CWE-662
 Improper Synchronization 		CVE-2020-14098 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211062 7.5 HIGH
Network 		mi redmi_ax6_firmware Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18. NVD-CWE-noinfo
CVE-2020-14097 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211063 9.8 CRITICAL
Network 		hcltechsw hcl_commerce Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unau… NVD-CWE-noinfo
CVE-2020-14275 2024-11-21 14:02 2021-01-13 Show GitHub Exploit DB Packet Storm
211064 7.5 HIGH
Network 		hcltechsw hcl_commerce Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors. NVD-CWE-noinfo
CVE-2020-14274 2024-11-21 14:02 2021-01-13 Show GitHub Exploit DB Packet Storm
211065 6.5 MEDIUM
Network 		apache dolphinscheduler Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface. CWE-276
Incorrect Default Permissions  		CVE-2020-13922 2024-11-21 14:02 2021-01-11 Show GitHub Exploit DB Packet Storm
211066 7.5 HIGH
Network 		hcltech domino HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to c… CWE-20
 Improper Input Validation  		CVE-2020-14273 2024-11-21 14:02 2020-12-29 Show GitHub Exploit DB Packet Storm
211067 6.1 MEDIUM
Network 		crk business_platform CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent. CWE-79
Cross-site Scripting 		CVE-2020-13969 2024-11-21 14:02 2020-12-24 Show GitHub Exploit DB Packet Storm
211068 9.8 CRITICAL
Network 		crk business_platform CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter. CWE-89
SQL Injection 		CVE-2020-13968 2024-11-21 14:02 2020-12-24 Show GitHub Exploit DB Packet Storm
211069 5.3 MEDIUM
Network 		hcltech domino HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-14270 2024-11-21 14:02 2020-12-23 Show GitHub Exploit DB Packet Storm
211070 8.8 HIGH
Network 		hcltechsw hcl_client_application_access A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow … CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2020-14231 2024-11-21 14:02 2020-12-23 Show GitHub Exploit DB Packet Storm