Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227221 7.5 危険 W-Agora - w-Agora の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6647 2012-12-20 18:34 2008-01-4 Show GitHub Exploit DB Packet Storm
227222 6.8 警告 xml2owl - xml2owl の showCode.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6632 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227223 6.8 警告 pnphpbb - PNphpBB2 の printview.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6624 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227224 5 警告 zeuscms - ZeusCMS における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6623 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227225 7.5 危険 zeuscms - ZeusCMS の security.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6622 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227226 4.3 警告 simpleforum - SimpleForum の simpleforum.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6616 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227227 5.8 警告 skyfex - SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6605 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227228 5 警告 xcms - XCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6604 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227229 4.3 警告 phpcredo - PHCDownload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6588 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227230 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6587 2012-12-20 18:34 2007-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199491 9.8 CRITICAL
Network 		lanatmservice m3_atm_monitoring_system In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient S… CWE-613
 Insufficient Session Expiration 		CVE-2020-29667 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199492 5.3 MEDIUM
Network 		lanatmservice m3_atm_monitoring_system In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and … NVD-CWE-Other
CVE-2020-29666 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199493 3.7 LOW
Network 		sympa
fedoraproject
debian 		sympa
fedora
debian_linux 		Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun. CWE-287
CWE-565
Improper Authentication
 Reliance on Cookies without Validation and Integrity Checking 		CVE-2020-29668 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199494 7.8 HIGH
Local 		paloaltonetworks cortex_xdr_agent A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privil… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-2049 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199495 5.5 MEDIUM
Local 		paloaltonetworks cortex_xdr_agent An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents t… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-2020 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199496 9.8 CRITICAL
Network 		flexense dupscout A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= atta… CWE-120
Classic Buffer Overflow 		CVE-2020-29659 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199497 7.8 HIGH
Local 		linux
fedoraproject
debian
netapp
broadcom
oracle 		linux_kernel
fedora
debian_linux
active_iq_unified_manager
fabric_operating_system
solidfire_baseboard_management_controller_firmware
h410c_firmware
a700s_firmware
8300_firmwa… 		A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b. CWE-416
CWE-667
 Use After Free
 Improper Locking 		CVE-2020-29661 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199498 4.4 MEDIUM
Local 		linux
fedoraproject
debian
netapp
broadcom 		linux_kernel
fedora
debian_linux
active_iq_unified_manager
fabric_operating_system
solidfire_baseboard_management_controller_firmware
h410c_firmware
a700s_firmware
8300_firmwa… 		A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIO… CWE-416
CWE-667
 Use After Free
 Improper Locking 		CVE-2020-29660 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
199499 9.1 CRITICAL
Network 		jerryscript jerryscript In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file. CWE-125
Out-of-bounds Read 		CVE-2020-29657 2024-11-21 14:24 2020-12-9 Show GitHub Exploit DB Packet Storm
199500 7.5 HIGH
Network 		asus rt-ac88u_firmware An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2020-29656 2024-11-21 14:24 2020-12-9 Show GitHub Exploit DB Packet Storm