Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228681 7.2 危険 トレンドマイクロ - Trend Micro AntiVirus などの PccScan.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6386 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228682 6.8 警告 robocode - Robocode の Event Dispatch Thread における任意の Java コードを実行される脆弱性 CWE-DesignError
CVE-2007-6382 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228683 6.5 警告 TYPO3 Association - TYPO3 用の indexed_search システムエクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6381 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228684 5 警告 WordPress.org - WordPress 用の PictPress プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6369 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228685 4.3 警告 sinecms - SineCMS の guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6367 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228686 7.5 危険 sinecms - SineCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6366 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228687 7.8 危険 サン・マイクロシステムズ - Sun XSCF XCP におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-6360 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
228688 8.5 危険 scponly - scponly におけるコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6350 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228689 6.8 警告 SquirrelMail Project - SquirrelMail における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-6348 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
228690 6.8 警告 prowizard - prowiz におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6510 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196051 8.1 HIGH
Network
nodejs
oracle
netapp
node.js
banking_extensibility_workbench
retail_xstore_point_of_service
mysql_cluster
blockchain_platform
snapcenter
oncommand_workflow_automation
oncommand_insight
active_iq_u…
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0. CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2020-8174 2024-11-21 14:38 2020-07-25 Show GitHub Exploit DB Packet Storm
196052 7.8 HIGH
Local
lenovo drivers_management An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges. CWE-428
 Unquoted Search Path or Element
CVE-2020-8326 2024-11-21 14:38 2020-07-25 Show GitHub Exploit DB Packet Storm
196053 7.8 HIGH
Local
lenovo drivers_management A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges. CWE-426
 Untrusted Search Path
CVE-2020-8317 2024-11-21 14:38 2020-07-25 Show GitHub Exploit DB Packet Storm
196054 7.5 HIGH
Network
servey_project servey A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file. CWE-22
Path Traversal
CVE-2020-8214 2024-11-21 14:38 2020-07-21 Show GitHub Exploit DB Packet Storm
196055 8.8 HIGH
Network
automattic canvas A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image. CWE-120
Classic Buffer Overflow
CVE-2020-8215 2024-11-21 14:38 2020-07-21 Show GitHub Exploit DB Packet Storm
196056 7.5 HIGH
Network
transloadit uppy The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-8205 2024-11-21 14:38 2020-07-21 Show GitHub Exploit DB Packet Storm
196057 9.8 CRITICAL
Network
jison_project jison Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks. CWE-78
OS Command 
CVE-2020-8178 2024-11-21 14:38 2020-07-16 Show GitHub Exploit DB Packet Storm
196058 7.4 HIGH
Network
lodash
oracle
lodash
peoplesoft_enterprise_peopletools
communications_billing_and_revenue_management
enterprise_communications_broker
banking_extensibility_workbench
banking_virtual_account_manageme…
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-8203 2024-11-21 14:38 2020-07-16 Show GitHub Exploit DB Packet Storm
196059 7.8 HIGH
Local
citrix gateway_plug-in_for_linux Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root. NVD-CWE-noinfo
CVE-2020-8199 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm
196060 6.1 MEDIUM
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
sd-wan_wanop
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1… CWE-79
Cross-site Scripting
CVE-2020-8198 2024-11-21 14:38 2020-07-11 Show GitHub Exploit DB Packet Storm