Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228261 4.3 警告 runcms - RunCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6545 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228262 7.5 危険 runcms - RunCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6544 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228263 6.8 警告 winuae - WinUAE の zfile.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6537 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228264 6.8 警告 ヤフー株式会社 - Yahoo! Toolbar の YShortcut.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6535 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228265 10 危険 Tiki Software Community Association - TikiWiki における脆弱性 CWE-noinfo
情報不足 		CVE-2007-6529 2012-12-20 18:34 2007-12-22 Show GitHub Exploit DB Packet Storm
228266 5 警告 Tiki Software Community Association - TikiWiki の tiki-listmovies.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6528 2012-12-20 18:34 2007-12-22 Show GitHub Exploit DB Packet Storm
228267 5.8 警告 rickard andersson - PunBB 用の imgUpload モジュールを伴う Automatic Image Upload における任意のコンテンツをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6527 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228268 4.3 警告 Tiki Software Community Association - TikiWiki の tiki-special_chars.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6526 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
228269 7.5 危険 woltlab - wBB Lite の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6518 2012-12-20 18:34 2007-12-24 Show GitHub Exploit DB Packet Storm
228270 6.8 警告 ravware - RavWare Software MAS Flic ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6516 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209571 7.1 HIGH
Network 		gnome libcroco libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. CWE-674
 Uncontrolled Recursion 		CVE-2020-12825 2024-11-21 14:00 2020-05-13 Show GitHub Exploit DB Packet Storm
209572 9.8 CRITICAL
Network 		infradead
fedoraproject
debian
opensuse 		openconnect
fedora
debian_linux
leap 		OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c. CWE-120
Classic Buffer Overflow 		CVE-2020-12823 2024-11-21 14:00 2020-05-13 Show GitHub Exploit DB Packet Storm
209573 7.5 HIGH
Network 		nystudio107 seomatic In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted T… CWE-74
Injection 		CVE-2020-12790 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209574 8.1 HIGH
Network 		cpanel cpanel cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540). NVD-CWE-noinfo
CVE-2020-12785 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209575 5.3 MEDIUM
Network 		cpanel cpanel cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). NVD-CWE-noinfo
CVE-2020-12784 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209576 8.8 HIGH
Network 		opennms opennms_horizon
opennms_meridian 		An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java obje… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-12760 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209577 7.8 HIGH
Local 		google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LV… NVD-CWE-noinfo
CVE-2020-12754 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209578 9.8 CRITICAL
Network 		google android An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability invo… CWE-787
 Out-of-bounds Write 		CVE-2020-12753 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209579 7.5 HIGH
Network 		google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. Attackers can determine user credentials via a brute-force attack against the Gatekeeper trustlet. T… CWE-20
CWE-307
 Improper Input Validation 
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-12752 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm
209580 7.8 HIGH
Local 		google android An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted … CWE-787
 Out-of-bounds Write 		CVE-2020-12751 2024-11-21 14:00 2020-05-12 Show GitHub Exploit DB Packet Storm