Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229071 4.3 警告 TinyWebGallery - TWG におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4958 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229072 7.5 危険 simpcms - SimpCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4953 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229073 5.1 警告 webmedia explorer - webmex における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4948 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229074 6.8 警告 phpffl - phpFFL における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4935 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229075 4.6 警告 phpffl - phpFFL における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4934 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229076 7.5 危険 shop-script - Shop-Script の includes/admin/sub/conf_appearence.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4933 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229077 7.5 危険 shop-script - Shop-Script の admin.php における admin パネルへアクセスされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4932 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
229078 4.3 警告 php-stats - PHP-Stats の tracking.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4917 2012-12-20 18:33 2007-09-17 Show GitHub Exploit DB Packet Storm
229079 9.3 危険 WinSCP - WinSCP におけるリモートサーバで任意のファイル転送を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4909 2012-12-20 18:33 2007-09-17 Show GitHub Exploit DB Packet Storm
229080 7.5 危険 Qualiteam Software Limited - X-Cart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4907 2012-12-20 18:33 2007-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209591 6.6 MEDIUM
Network 		spice_project
redhat
canonical
debian
opensuse 		spice
enterprise_linux
ubuntu_linux
debian_linux
enterprise_linux_eus
leap
enterprise_linux_aus
openstack
enterprise_linux_tus
enterprise_linux_update_services_for_sap_solu… 		Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affe… CWE-120
Classic Buffer Overflow 		CVE-2020-14355 2024-11-21 14:03 2020-10-8 Show GitHub Exploit DB Packet Storm
209592 8.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to wri… - CVE-2020-14374 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209593 3.3 LOW
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could c… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2020-14378 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209594 7.1 HIGH
Local 		dpdk
canonical
opensuse 		data_plane_development_kit
ubuntu_linux
leap 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read a… - CVE-2020-14377 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209595 7.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. … CWE-120
Classic Buffer Overflow 		CVE-2020-14376 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209596 7.8 HIGH
Local 		dpdk
opensuse
canonical 		data_plane_development_kit
leap
ubuntu_linux 		A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-14375 2024-11-21 14:03 2020-10-1 Show GitHub Exploit DB Packet Storm
209597 5.3 MEDIUM
Network 		podman_project
redhat
fedoraproject 		podman
enterprise_linux
openshift_container_platform
fedora 		An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are cr… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2020-14370 2024-11-21 14:03 2020-09-23 Show GitHub Exploit DB Packet Storm
209598 7.1 HIGH
Local 		redhat
debian 		ansible_tower
ansible_engine
ceph_storage
openstack_platform
debian_linux 		A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during … - CVE-2020-14365 2024-11-21 14:03 2020-09-23 Show GitHub Exploit DB Packet Storm
209599 3.5 LOW
Adjacent 		philips clinical_collaboration_platform Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage… NVD-CWE-Other
CVE-2020-14525 2024-11-21 14:03 2020-09-19 Show GitHub Exploit DB Packet Storm
209600 4.3 MEDIUM
Network 		philips clinical_collaboration_platform Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to… - CVE-2020-14506 2024-11-21 14:03 2020-09-19 Show GitHub Exploit DB Packet Storm