Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229251 5 警告 prototypejs - prototypejs フレームワークにおけるデータを取得される脆弱性 CWE-DesignError
CVE-2007-2383 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
229252 10 危険 シマンテック - Symantec ESM のエージェントリモート更新インターフェースにおける任意のコードを実行される脆弱性 - CVE-2007-2375 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
229253 7.5 危険 XOOPS - XOOPS 用の John Mordo モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2370 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229254 5 警告 webSPELL - WebSPELL の picture.php における任意のファイルを読まれる脆弱性 - CVE-2007-2368 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229255 10 危険 wserve http server - whttp の wserve_console.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-2367 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229256 4.9 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2361 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229257 6.8 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2360 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229258 7.2 危険 シマンテック - Symantec Norton Ghost などの製品で使用される Ghost Service Manager におけるバッファオーバーフローの脆弱性 - CVE-2007-2359 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229259 6.8 警告 sinecms - SineCms の mods/Core/result.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2357 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229260 7.8 危険 Progress Software Corporation - Progress Webspeed Messenger における重要な情報を取得される脆弱性 - CVE-2007-2354 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196781 6.1 MEDIUM
Network 		mozilla
fedoraproject 		bleach
fedora 		In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option. CWE-79
Cross-site Scripting 		CVE-2020-6802 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196782 9.8 CRITICAL
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service. CWE-787
 Out-of-bounds Write 		CVE-2020-7007 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196783 7.5 HIGH
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-7001 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196784 7.5 HIGH
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-6997 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196785 9.8 CRITICAL
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. CWE-521
Weak Password Requirements  		CVE-2020-6991 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196786 8.8 HIGH
Adjacent 		honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution. CWE-74
Injection 		CVE-2020-6982 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196787 9.8 CRITICAL
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-6981 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196788 7.5 HIGH
Network 		moxa eds-g516e_firmware
eds-510e_firmware 		In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-6979 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196789 7.2 HIGH
Network 		honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. NVD-CWE-Other
CVE-2020-6978 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
196790 8.8 HIGH
Network 		honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code. CWE-352
 Origin Validation Error 		CVE-2020-7005 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm