Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229491 6.8 警告 yarssr - yarssr の GUI.pm における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5837 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229492 7.5 危険 ssl-explorer - SSL-Explorer の selectLanguage.do における HTTP トランザクション内にデータを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5832 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229493 5 警告 ssl-explorer - SSL-Explorer の fileSystem.do におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5831 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229494 6 警告 シマンテック - Macintosh 用の Symantec AntiVirus などの製品の Disk Mount スキャナにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5829 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
229495 7.5 危険 scribe - Ben Ng Scribe の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5823 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229496 7.5 危険 scribe - Ben Ng Scribe の forum.php における regged/ 配下の特定のファイルへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5822 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229497 7.6 危険 sblog - sBlog の blocks_edit_do.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5818 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229498 10 危険 SonicWALL - SonicWall SSL-VPN 200 および SSL-VPN 2000/4000 の WebCacheCleaner ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5815 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229499 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5814 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229500 6.8 警告 ssreader - SSReader の Ultra Star Reader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5807 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209661 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file typ… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-15658 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209662 7.8 HIGH
Local 		mozilla firefox
firefox_esr
thunderbird 		Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: Thi… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15657 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209663 8.8 HIGH
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only … CWE-843
Type Confusion 		CVE-2020-15656 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209664 6.5 MEDIUM
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affe… NVD-CWE-noinfo
CVE-2020-15655 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209665 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived brok… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15654 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209666 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed po… NVD-CWE-Other
CVE-2020-15653 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209667 6.5 MEDIUM
Network 		mozilla
canonical 		firefox
firefox_esr
thunderbird
ubuntu_linux 		By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulne… CWE-346
 Origin Validation Error 		CVE-2020-15652 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209668 4.3 MEDIUM
Network 		mozilla firefox A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < … NVD-CWE-noinfo
CVE-2020-15651 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209669 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only a… NVD-CWE-noinfo
CVE-2020-15650 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
209670 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-15649 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm