Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231021 6.8 警告 sh-news - SH-News の misc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6801 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
231022 7.5 危険 The Cacti Group - Cacti における SQL インジェクションの脆弱性 - CVE-2006-6799 2012-12-20 18:02 2006-12-28 Show GitHub Exploit DB Packet Storm
231023 7.5 危険 PHP Outburst - UPB の chat/login.php における任意の PHP コードを挿入される脆弱性 - CVE-2006-6790 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
231024 7.5 危険 phpbbxtra - Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6789 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
231025 6.8 警告 timberwolf - TimberWolf の shownews.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6778 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
231026 9.3 危険 w3m project - w3m の file.c におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2006-6772 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
231027 6.8 警告 pwp technologies - PWP Technologies The Classified Ad System の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6768 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
231028 7.5 危険 phpmymanga - Phpmymanga の template.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6760 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
231029 2.1 注意 phpprofiles - phpProfiles におけるディレクトリコンテンツをリスト化される脆弱性 - CVE-2006-6744 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
231030 4.6 警告 phpprofiles - phpProfiles におけるファイルを削除される脆弱性 - CVE-2006-6743 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211971 9.1 CRITICAL
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-12032 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211972 6.1 MEDIUM
Physics 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not restrict access to the USB interface from an unauthorized user with physical acce… NVD-CWE-Other
CVE-2020-12024 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211973 6.1 MEDIUM
Local 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editi… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-12020 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211974 9.8 CRITICAL
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 a… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-12016 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211975 7.5 HIGH
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an att… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-12008 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211976 6.1 MEDIUM
Physics 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, an… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-12012 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211977 7.5 HIGH
Network 		apache
canonical
oracle
opensuse
debian
netapp 		tomcat
ubuntu_linux
workload_manager
siebel_ui_framework
mysql_enterprise_monitor
leap
debian_linux
oncommand_system_manager 		A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient … NVD-CWE-noinfo
CVE-2020-11996 2024-11-21 13:59 2020-06-27 Show GitHub Exploit DB Packet Storm
211978 8.8 HIGH
Adjacent 		rockwellautomation factorytalk_services_platform In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent a… CWE-20
 Improper Input Validation  		CVE-2020-12033 2024-11-21 13:59 2020-06-24 Show GitHub Exploit DB Packet Storm
211979 9.0 CRITICAL
Network 		osisoft pi_web_api In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitr… CWE-79
Cross-site Scripting 		CVE-2020-12021 2024-11-21 13:59 2020-06-24 Show GitHub Exploit DB Packet Storm
211980 9.8 CRITICAL
Network 		unisys stealth In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key. CWE-863
 Incorrect Authorization 		CVE-2020-12053 2024-11-21 13:59 2020-06-23 Show GitHub Exploit DB Packet Storm