Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227481 7.5 危険 zeuscms - ZeusCMS の security.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6622 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227482 4.3 警告 simpleforum - SimpleForum の simpleforum.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6616 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227483 5.8 警告 skyfex - SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6605 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227484 5 警告 xcms - XCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6604 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227485 4.3 警告 phpcredo - PHCDownload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6588 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227486 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6587 2012-12-20 18:34 2007-11-3 Show GitHub Exploit DB Packet Storm
227487 6.4 警告 socialengine - Social Engine におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6581 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227488 7.5 危険 wallpaper - Wallpaper Site における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6580 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227489 10 危険 Xfce - Xfce の Widget Library におけるメモリ二重解放の脆弱性 CWE-119
バッファエラー 		CVE-2007-6532 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227490 5 警告 Xfce - Xfce の Panel コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6531 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196691 7.5 HIGH
Network 		f5 big-ip_access_policy_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_application_acceleration_manager
big-ip_application_security_manager
big-ip_domain_name_system
… 		On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service. NVD-CWE-noinfo
CVE-2020-5857 2024-11-21 14:34 2020-03-28 Show GitHub Exploit DB Packet Storm
196692 9.8 CRITICAL
Network 		keijiban_tsumiki_project keijiban_tsumiki Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2020-5561 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196693 9.8 CRITICAL
Network 		wl-enq_project wl-enq WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors. CWE-78
OS Command  		CVE-2020-5560 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196694 6.1 MEDIUM
Network 		wl-enq_project wl-enq Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5559 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196695 8.8 HIGH
Network 		cutephp cutenews CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection 		CVE-2020-5558 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196696 6.1 MEDIUM
Network 		cutephp cutenews Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5557 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196697 9.8 CRITICAL
Network 		shihonkanri_plus_goout_project shihonkanri_plus_goout Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2020-5556 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196698 9.1 CRITICAL
Network 		shihonkanri_plus_goout_project shihonkanri_plus_goout Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper in… CWE-20
 Improper Input Validation  		CVE-2020-5555 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196699 9.1 CRITICAL
Network 		shihonkanri_plus_goout_project shihonkanri_plus_goout Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2020-5554 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
196700 9.8 CRITICAL
Network 		mailform mailform mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection 		CVE-2020-5553 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm