Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228561 10 危険 sky software - Sky Software Shell MegaPack ActiveX の shComboBox ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2848 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228562 6.8 警告 unicon-imc2 - unicon-imc2 の ImmModules/cce/ におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2835 2012-12-20 18:19 2007-07-1 Show GitHub Exploit DB Packet Storm
228563 9.3 危険 wavelink media - TutorialCMS における認証を回避される脆弱性 - CVE-2007-2822 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228564 7.5 危険 WordPress.org - WordPress の wp-admin/admin-ajax.php における SQL インジェクションの脆弱性 - CVE-2007-2821 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228565 4.3 警告 track+ - Track+ の reportItem.do におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2819 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228566 7.5 危険 vizayn urun - Vizayn Urun Tanitim Sitesi の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2803 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228567 4.3 警告 rm - RM EasyMail Plus の cp/ps/Main/login/Login におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2802 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228568 6.8 警告 vpasp - VP-ASP Shopping Cart の shopcontent.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2790 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
228569 10 危険 rational software - Rational Soft Hidden Administrator における認証を回避される脆弱性 - CVE-2007-2783 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
228570 6.8 警告 wikyblog - WikyBlog の include/sessionRegister.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2781 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209811 7.5 HIGH
Network 		woocommerce nab_transact An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrar… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-11497 2024-11-21 13:58 2020-08-27 Show GitHub Exploit DB Packet Storm
209812 7.5 HIGH
Network 		microfocus arcsight_management_center Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a den… NVD-CWE-noinfo
CVE-2020-11848 2024-11-21 13:58 2020-08-20 Show GitHub Exploit DB Packet Storm
209813 6.7 MEDIUM
Local 		spirent avalanche
testcenter 		An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metac… CWE-78
OS Command  		CVE-2020-11733 2024-11-21 13:58 2020-08-13 Show GitHub Exploit DB Packet Storm
209814 9.8 CRITICAL
Network 		zohocorp manageengine_adselfservice_plus An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vul… CWE-269
 Improper Privilege Management 		CVE-2020-11552 2024-11-21 13:58 2020-08-12 Show GitHub Exploit DB Packet Storm
209815 8.8 HIGH
Network 		microfocus secure_messaging_gateway DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user w… CWE-78
OS Command  		CVE-2020-11852 2024-11-21 13:58 2020-08-8 Show GitHub Exploit DB Packet Storm
209816 5.5 MEDIUM
Local 		canonical whoopsie In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ub… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-11937 2024-11-21 13:58 2020-08-7 Show GitHub Exploit DB Packet Storm
209817 6.1 MEDIUM
Network 		plesk onyx A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. CWE-79
Cross-site Scripting 		CVE-2020-11584 2024-11-21 13:58 2020-08-4 Show GitHub Exploit DB Packet Storm
209818 6.1 MEDIUM
Network 		plesk obsidian A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. CWE-79
Cross-site Scripting 		CVE-2020-11583 2024-11-21 13:58 2020-08-4 Show GitHub Exploit DB Packet Storm
209819 5.9 MEDIUM
Local 		canonical ubuntu_linux It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DI… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-11934 2024-11-21 13:58 2020-07-30 Show GitHub Exploit DB Packet Storm
209820 6.8 MEDIUM
Physics 		canonical ubuntu_linux
snapd 		cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-d… NVD-CWE-Other
CVE-2020-11933 2024-11-21 13:58 2020-07-30 Show GitHub Exploit DB Packet Storm