Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229301 7.8 危険 zomplog - Zomplog の upload/force_download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2157 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
229302 7.5 危険 rezervi generic - Rezervi Generic における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2156 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
229303 7.8 危険 phpfaber - phpFaber TopSites の template.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2155 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
229304 10 危険 stephen craton - Stephen Craton Chatness における権限を取得される脆弱性 - CVE-2007-2149 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
229305 6.5 警告 stephen craton - Stephen Craton Chatness の admin/save.php における .html ファイルへ PHP コードを挿入される脆弱性 - CVE-2007-2148 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
229306 7.5 危険 sitebar - Sitebar における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2088 2012-12-20 18:19 2007-04-18 Show GitHub Exploit DB Packet Storm
229307 6.9 警告 zonelabs - Check Point Zone Labs ZoneAlarm の vsdatant.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2083 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
229308 7.5 危険 xampp - Windows 用の XAMPP における SQL インジェクションの脆弱性 - CVE-2007-2080 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
229309 9.3 危険 xampp - Windows 用の XAMPP におけるバッファオーバーフローの脆弱性 - CVE-2007-2079 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
229310 6.9 警告 scramdisk 4 linux - ScramDisk 4 Linux における権限を取得される脆弱性 - CVE-2007-2075 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209971 6.5 MEDIUM
Network 		teradici cloud_access_connector An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID… CWE-352
 Origin Validation Error 		CVE-2020-13186 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
209972 6.5 MEDIUM
Network 		teradici cloud_access_connector Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an atta… CWE-287
Improper Authentication 		CVE-2020-13185 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
209973 9.8 CRITICAL
Network 		wavlink wn575a4_firmware
wn579x3_firmware 		Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request. CWE-77
Command Injection 		CVE-2020-13117 2024-11-21 14:00 2021-02-10 Show GitHub Exploit DB Packet Storm
209974 4.8 MEDIUM
Network 		tufin securechange Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg… CWE-79
Cross-site Scripting 		CVE-2020-13134 2024-11-21 14:00 2021-01-20 Show GitHub Exploit DB Packet Storm
209975 6.1 MEDIUM
Network 		tufin securechange Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg… CWE-79
Cross-site Scripting 		CVE-2020-13133 2024-11-21 14:00 2021-01-20 Show GitHub Exploit DB Packet Storm
209976 5.4 MEDIUM
Network 		carbonite server_backup_portal OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation. CWE-79
Cross-site Scripting 		CVE-2020-13116 2024-11-21 14:00 2021-01-13 Show GitHub Exploit DB Packet Storm
209977 9.8 CRITICAL
Network 		gssproxy_project
debian 		gssproxy
debian_linux 		gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when runn… CWE-667
 Improper Locking 		CVE-2020-12658 2024-11-21 14:00 2020-12-31 Show GitHub Exploit DB Packet Storm
209978 7.8 HIGH
Local 		amd vbios_flash_tool_software_development_kit A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system. NVD-CWE-noinfo
CVE-2020-12927 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm
209979 6.4 MEDIUM
Physics 		amd trusted_platform_modules_reference The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TP… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-12926 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm
209980 5.5 MEDIUM
Local 		amd energy_driver_for_linux A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks.… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-12912 2024-11-21 14:00 2020-11-13 Show GitHub Exploit DB Packet Storm