Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227481 7.5 危険 zeuscms - ZeusCMS の security.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6622 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227482 4.3 警告 simpleforum - SimpleForum の simpleforum.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6616 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227483 5.8 警告 skyfex - SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6605 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227484 5 警告 xcms - XCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6604 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227485 4.3 警告 phpcredo - PHCDownload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6588 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227486 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6587 2012-12-20 18:34 2007-11-3 Show GitHub Exploit DB Packet Storm
227487 6.4 警告 socialengine - Social Engine におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6581 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227488 7.5 危険 wallpaper - Wallpaper Site における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6580 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227489 10 危険 Xfce - Xfce の Widget Library におけるメモリ二重解放の脆弱性 CWE-119
バッファエラー
CVE-2007-6532 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227490 5 警告 Xfce - Xfce の Panel コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6531 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210481 4.4 MEDIUM
Local
dpdk
canonical
fedoraproject
data_plane_development_kit
ubuntu_linux
fedora
A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-b… CWE-125
Out-of-bounds Read
CVE-2020-10724 2024-11-21 13:55 2020-05-20 Show GitHub Exploit DB Packet Storm
210482 6.7 MEDIUM
Local
dpdk
canonical
fedoraproject
opensuse
oracle
data_plane_development_kit
ubuntu_linux
fedora
leap
enterprise_communications_broker
communications_session_border_controller
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied… - CVE-2020-10723 2024-11-21 13:55 2020-05-20 Show GitHub Exploit DB Packet Storm
210483 6.7 MEDIUM
Local
dpdk
canonical
fedoraproject
opensuse
oracle
data_plane_development_kit
ubuntu_linux
fedora
leap
enterprise_communications_broker
communications_session_border_controller
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing… - CVE-2020-10722 2024-11-21 13:55 2020-05-20 Show GitHub Exploit DB Packet Storm
210484 5.0 MEDIUM
Local
redhat ansible_tower
ansible
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the… CWE-362
Race Condition
CVE-2020-10744 2024-11-21 13:55 2020-05-15 Show GitHub Exploit DB Packet Storm
210485 9.8 CRITICAL
Network
opto22 softpac_project Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for… CWE-862
 Missing Authorization
CVE-2020-10620 2024-11-21 13:55 2020-05-15 Show GitHub Exploit DB Packet Storm
210486 8.8 HIGH
Network
opto22 softpac_project Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts. CWE-427
 Uncontrolled Search Path Element
CVE-2020-10616 2024-11-21 13:55 2020-05-15 Show GitHub Exploit DB Packet Storm
210487 9.1 CRITICAL
Network
opto22 softpac_project Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with… CWE-862
 Missing Authorization
CVE-2020-10612 2024-11-21 13:55 2020-05-15 Show GitHub Exploit DB Packet Storm
210488 7.8 HIGH
Local
fazecast
schneider-electric
jserialcomm
ecostruxure_it_gateway
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software instal… CWE-427
 Uncontrolled Search Path Element
CVE-2020-10626 2024-11-21 13:55 2020-05-15 Show GitHub Exploit DB Packet Storm
210489 9.8 CRITICAL
Network
pingidentity pingid_ssh_integration Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers. This condition can be potentially exploited into a Remote Code Execution vector on the authenticatin… CWE-787
 Out-of-bounds Write
CVE-2020-10654 2024-11-21 13:55 2020-05-13 Show GitHub Exploit DB Packet Storm
210490 6.6 MEDIUM
Physics
redhat openshift_container_platform A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OA… - CVE-2020-10706 2024-11-21 13:55 2020-05-12 Show GitHub Exploit DB Packet Storm