Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228701 5 警告 vincent hor - Calendarix における重要な情報を取得される脆弱性 - CVE-2007-3259 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228702 5 警告 vincent hor - Calendarix の calendar.php における重要な情報を取得される脆弱性 - CVE-2007-3258 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228703 4 警告 xythos - XEDM などにおけるマルウェアを配布するドキュメントと任意の Content-Type HTTP ヘッダを関連づけられる脆弱性 - CVE-2007-3256 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228704 6.5 警告 xythos - XEDM におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3255 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228705 3.5 注意 xythos - XEDM におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3254 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228706 7.8 危険 portalapp - PortalApp におけるデータベースをダウンロードされる脆弱性 - CVE-2007-3252 2012-12-20 18:19 2007-06-18 Show GitHub Exploit DB Packet Storm
228707 6.8 警告 VirtueMart - VirtueMart における SQL インジェクションの脆弱性 - CVE-2007-3247 2012-12-20 18:19 2007-06-18 Show GitHub Exploit DB Packet Storm
228708 7.5 危険 web-app.org
web-app.net		 - web-app.net WebAPP などの Menu Manager Mod における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3242 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228709 4.3 警告 WordPress.org - WordPress 用の cordobo-green-park テーマの blogroll.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3241 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228710 4.3 警告 WordPress.org - WordPress 用の Vistered-Little テーマの 404.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3240 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209831 9.0 CRITICAL
Network 		pandorafms pandora_fms Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run … CWE-79
Cross-site Scripting 		CVE-2020-11749 2024-11-21 13:58 2020-07-14 Show GitHub Exploit DB Packet Storm
209832 9.8 CRITICAL
Network 		microfocus identity_manager Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information expos… NVD-CWE-noinfo
CVE-2020-11849 2024-11-21 13:58 2020-07-8 Show GitHub Exploit DB Packet Storm
209833 6.1 MEDIUM
Network 		telefonica o2_business The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this activity is to handle deeplinks that can be delivered either … CWE-601
Open Redirect 		CVE-2020-11882 2024-11-21 13:58 2020-07-8 Show GitHub Exploit DB Packet Storm
209834 8.1 HIGH
Network 		python
fedoraproject
canonical 		pillow
fedora
ubuntu_linux 		In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311. CWE-125
Out-of-bounds Read 		CVE-2020-11538 2024-11-21 13:58 2020-06-26 Show GitHub Exploit DB Packet Storm
209835 5.3 MEDIUM
Network 		wolfssl wolfssl The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak." CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-11735 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
209836 7.5 HIGH
Network 		mi xiaomi_r3600_firmware Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication CWE-306
Missing Authentication for Critical Function 		CVE-2020-11961 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
209837 9.8 CRITICAL
Network 		mi xiaomi_r3600_firmware Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to po… NVD-CWE-noinfo
CVE-2020-11960 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
209838 7.5 HIGH
Network 		mi xiaomi_r3600_firmware An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. NVD-CWE-noinfo
CVE-2020-11959 2024-11-21 13:58 2020-06-25 Show GitHub Exploit DB Packet Storm
209839 7.8 HIGH
Local 		winmagic securedoc The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-11520 2024-11-21 13:58 2020-06-23 Show GitHub Exploit DB Packet Storm
209840 7.8 HIGH
Local 		winmagic securedoc The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle. Exploiting this vulnerability results in … NVD-CWE-noinfo
CVE-2020-11519 2024-11-21 13:58 2020-06-23 Show GitHub Exploit DB Packet Storm