Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248881 7.5 危険 charon internet - Julian Roberts Charon Cart の Review.asp における SQL インジェクションの脆弱性 - CVE-2006-4882 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248882 4.3 警告 david bennett - David Bennett PHPp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4881 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248883 5 警告 david bennett - David Bennett PHPp における重要な情報を取得される脆弱性 - CVE-2006-4880 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248884 7.5 危険 david bennett - David Bennett PHPp の profile.php における SQL インジェクションの脆弱性 - CVE-2006-4879 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248885 5 警告 david bennett - David Bennett PHPp の footer.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4878 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248886 5 警告 david bennett - David Bennett PHPp における任意のプログラム変数を上書きされる脆弱性 - CVE-2006-4877 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248887 7.5 危険 aewebworks - AEDating における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4870 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248888 7.5 危険 gnuturk - GNUTurk 2G の mods.php における SQL インジェクションの脆弱性 - CVE-2006-4867 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248889 4.6 警告 アップル - Apple OS X の kextload におけるバッファオーバーフローの脆弱性 - CVE-2006-4866 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
248890 7.5 危険 all enthusiast inc - All Enthusiast ReviewPost の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4864 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210141 8.8 HIGH
Network
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. CWE-352
 Origin Validation Error
CVE-2020-25622 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm
210142 8.4 HIGH
Local
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys … CWE-306
Missing Authentication for Critical Function
CVE-2020-25621 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm
210143 7.8 HIGH
Local
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to t… CWE-798
 Use of Hard-coded Credentials
CVE-2020-25620 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm
210144 4.4 MEDIUM
Local
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwardi… NVD-CWE-Other
CVE-2020-25619 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210145 8.8 HIGH
Network
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as … CWE-78
OS Command 
CVE-2020-25618 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210146 8.8 HIGH
Network
solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), le… CWE-22
Path Traversal
CVE-2020-25617 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210147 8.8 HIGH
Network
dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_…
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to … CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2020-25759 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210148 8.8 HIGH
Network
dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_…
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into s… CWE-354
 Improper Validation of Integrity Check Value
CVE-2020-25758 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210149 8.8 HIGH
Adjacent
dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_…
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with r… CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2020-25757 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
210150 7.8 HIGH
Local
x.org
redhat
x_server
enterprise_linux
A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data … - CVE-2020-25712 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm