Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 7.5 危険 really simple php and ajax - RSPA における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1982 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228593 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228594 7.5 危険 wf-sections
XOOPS		 - Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
228595 4.3 警告 sam crew - Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1969 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228596 6.8 警告 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1968 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228597 7.5 危険 XOOPS - XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1962 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228598 7.5 危険 phpBB - phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1961 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228599 7.5 危険 XOOPS - XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1960 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228600 10 危険 tinymux - TinyMUX の command.cpp における脆弱性 - CVE-2007-1959 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197141 5.5 MEDIUM
Local 		vmware workstation
fusion
esxi 		VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerabi… CWE-617
 Reachable Assertion 		CVE-2020-3958 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197142 7.0 HIGH
Local 		vmware fusion
horizon_client
remote_console 		VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-o… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-3957 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197143 6.1 MEDIUM
Network 		ibm business_process_manager
business_automation_workflow 		IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An a… NVD-CWE-Other
CVE-2020-4490 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197144 7.0 HIGH
Local 		ibm mq_for_hpe_nonstop IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. NVD-CWE-noinfo
CVE-2020-4352 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197145 5.4 MEDIUM
Network 		ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun… CWE-79
Cross-site Scripting 		CVE-2020-4306 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197146 2.7 LOW
Network 		ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informat… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4248 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197147 5.4 MEDIUM
Network 		ibm jazz_reporting_service IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f… CWE-79
Cross-site Scripting 		CVE-2020-4419 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197148 6.5 MEDIUM
Network 		ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485. CWE-863
 Incorrect Authorization 		CVE-2020-4249 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197149 7.1 HIGH
Network 		ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to … CWE-611
XXE 		CVE-2020-4246 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197150 7.5 HIGH
Network 		ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-For… CWE-521
Weak Password Requirements  		CVE-2020-4245 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm