Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228491 5 警告 XScreenSaver project - xscreensaver におけるロックされたセッションへのアクセス権を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5585 2012-12-20 18:33 2007-10-19 Show GitHub Exploit DB Packet Storm
228492 7.5 危険 Pligg - Pligg CMS の login.php におけるユーザのパスワードを再設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-5579 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228493 7.5 危険 Secure Ideas - BASE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5578 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228494 4.3 警告 treble designs - 1024 CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5575 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228495 6.8 警告 phpdj - PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5574 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228496 4.3 警告 sphpblog - Simple PHP Blog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5572 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228497 2.6 注意 simple php forum - NSSboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5564 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228498 7.5 危険 VirtueMart - VirtueMart における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5563 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228499 6.9 警告 シマンテック - Symantec Altiris Deployment Solution における認証資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-5555 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
228500 9.3 危険 TIBCO Software - TIBCO SmartPGM FX におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5546 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196111 7.5 HIGH
Network 		djvalidator_project djvalidator All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-7779 2024-11-21 14:37 2020-11-26 Show GitHub Exploit DB Packet Storm
196112 7.3 HIGH
Network 		systeminformation systeminformation This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands. CWE-78
OS Command  		CVE-2020-7778 2024-11-21 14:37 2020-11-26 Show GitHub Exploit DB Packet Storm
196113 9.1 CRITICAL
Network 		opencrx opencrx CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the pass… CWE-287
Improper Authentication 		CVE-2020-7378 2024-11-21 14:37 2020-11-25 Show GitHub Exploit DB Packet Storm
196114 7.2 HIGH
Network 		jsen_project jsen This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is… NVD-CWE-noinfo
CVE-2020-7777 2024-11-21 14:37 2020-11-24 Show GitHub Exploit DB Packet Storm
196115 6.6 MEDIUM
Network 		netu wf2429tb_firmware Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users.… CWE-20
 Improper Input Validation  		CVE-2020-7842 2024-11-21 14:37 2020-11-21 Show GitHub Exploit DB Packet Storm
196116 6.5 MEDIUM
Network 		schneider-electric webreports A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due … NVD-CWE-Other
CVE-2020-7573 2024-11-21 14:37 2020-11-20 Show GitHub Exploit DB Packet Storm
196117 8.8 HIGH
Network 		schneider-electric webreports A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able … - CVE-2020-7572 2024-11-21 14:37 2020-11-20 Show GitHub Exploit DB Packet Storm
196118 5.4 MEDIUM
Network 		schneider-electric webreports A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could… - CVE-2020-7571 2024-11-21 14:37 2020-11-20 Show GitHub Exploit DB Packet Storm
196119 5.4 MEDIUM
Network 		schneider-electric webreports A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an au… - CVE-2020-7570 2024-11-21 14:37 2020-11-20 Show GitHub Exploit DB Packet Storm
196120 8.8 HIGH
Network 		schneider-electric webreports A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upl… - CVE-2020-7569 2024-11-21 14:37 2020-11-20 Show GitHub Exploit DB Packet Storm