Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227491 4.3 警告 シマンテック - Windows 上で稼動する Symantec ESM マネージャなどにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2896 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
227492 10 危険 サン・マイクロシステムズ - Sun Java Web Proxy Server の sockd におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2881 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
227493 7.8 危険 windy road - Vistered Little の skins/common.css.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2934 2012-12-20 18:19 2006-08-29 Show GitHub Exploit DB Packet Storm
227494 7.2 危険 tcl.tk - Tcl/Tk の tcl/win/tclWinReg.c におけるバッファオーバーフローの脆弱性 - CVE-2007-2877 2012-12-20 18:19 2007-05-29 Show GitHub Exploit DB Packet Storm
227495 5.8 警告 レッドハット - Fedora NetworkManager パッケージの wpa_supplicant におけるバッファオーバーフローの脆弱性 - CVE-2007-2874 2012-12-20 18:19 2007-06-4 Show GitHub Exploit DB Packet Storm
227496 7.5 危険 phpecho cms - PHPEcho CMS の modules/admin/modules/gallery.php における SQL インジェクションの脆弱性 - CVE-2007-2866 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
227497 9.3 危険 phpPgAdmin - phpPgAdmin の sqledit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2865 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
227498 7.5 危険 saxon - SAXON における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2861 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
227499 7.5 危険 simpgb - SimpGB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2859 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
227500 6.5 警告 phpBB - phpBB 用の IP-Tracking Mod における SQL インジェクションの脆弱性 - CVE-2007-2858 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197701 5.3 MEDIUM
Network 		atlassian crowd The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d… NVD-CWE-noinfo
CVE-2020-36240 2024-11-21 14:29 2021-03-2 Show GitHub Exploit DB Packet Storm
197702 8.1 HIGH
Network 		dropbear_ssh_project dropbear_ssh scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685. NVD-CWE-noinfo
CVE-2020-36254 2024-11-21 14:29 2021-02-25 Show GitHub Exploit DB Packet Storm
197703 5.0 MEDIUM
Network 		atlassian atlassian-gadgets The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-36232 2024-11-21 14:29 2021-02-23 Show GitHub Exploit DB Packet Storm
197704 4.6 MEDIUM
Physics 		owncloud owncloud The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-36248 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197705 5.7 MEDIUM
Adjacent 		owncloud owncloud ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number. CWE-330
 Use of Insufficiently Random Values 		CVE-2020-36252 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197706 4.3 MEDIUM
Network 		owncloud owncloud ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share. NVD-CWE-noinfo
CVE-2020-36251 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197707 4.6 MEDIUM
Physics 		owncloud owncloud In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past. NVD-CWE-noinfo
CVE-2020-36250 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197708 7.5 HIGH
Network 		owncloud file_firewall The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares. NVD-CWE-Other
CVE-2020-36249 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197709 8.8 HIGH
Network 		osc open_ondemand Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF. CWE-352
 Origin Validation Error 		CVE-2020-36247 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
197710 7.8 HIGH
Local 		amaze_file_manager_project amaze_file_manager Amaze File Manager before 3.5.1 allows attackers to obtain root privileges via shell metacharacters in a symbolic link. CWE-78
OS Command  		CVE-2020-36246 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm