Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229511 10 危険 Pegasus Mail - Mercury/32 におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1373 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
229512 10 危険 postguestbook - PHP-Nuke 用の PostGuestbook モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1372 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
229513 6.9 警告 Jon Trulson - Conquest におけるバッファオーバーフローの脆弱性 - CVE-2007-1371 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
229514 6.2 警告 Zend Technologies Ltd. - Zend Platform におけるルート権限を取得される脆弱性 - CVE-2007-1370 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
229515 4.4 警告 Zend Technologies Ltd. - Zend Platform の ini_modifier における system.ini ファイルを変更される脆弱性 - CVE-2007-1369 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
229516 4.3 警告 VirtueMart - VirtueMart の virtuemart_parser.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1361 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
229517 6.6 警告 サン・マイクロシステムズ - Sun Fire X2100M2 および X2200M2 用の ipmitool における権限を取得される脆弱性 - CVE-2007-1346 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229518 7.5 危険 webcalendar - Craig Knudsen WebCalendar の includes/functions.php における任意のグローバル変数を設定される脆弱性 - CVE-2007-1343 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
229519 5 警告 Simple Invoices - Simple Invoices の include/auth/auth.php における重要な情報を取得される脆弱性 - CVE-2007-1341 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
229520 7.5 危険 weltennetz - Weltennetz News-Letterman の eintrag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1340 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210251 7.3 HIGH
Local 		beckhoff twincat_extended_automation_runtime The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions whic… CWE-276
Incorrect Default Permissions  		CVE-2020-12510 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
210252 6.5 MEDIUM
Network 		endress rsg35_firmware
rsg45_firmware
orsg35_firmware
orsg45_firmware 		Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive info… CWE-200
Information Exposure 		CVE-2020-12496 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
210253 8.8 HIGH
Network 		endress rsg35_firmware
rsg45_firmware
orsg35_firmware
orsg45_firmware 		Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface w… CWE-269
 Improper Privilege Management 		CVE-2020-12495 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
210254 7.5 HIGH
Network 		symantec endpoint_detection_and_response Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. NVD-CWE-noinfo
CVE-2020-12593 2024-11-21 13:59 2020-11-19 Show GitHub Exploit DB Packet Storm
210255 9.8 CRITICAL
Network 		intel open_webrtc_toolkit Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access. NVD-CWE-Other
CVE-2020-12338 2024-11-21 13:59 2020-11-14 Show GitHub Exploit DB Packet Storm
210256 8.8 HIGH
Adjacent 		intel proset\/wireless_wifi Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent … NVD-CWE-noinfo
CVE-2020-12313 2024-11-21 13:59 2020-11-14 Show GitHub Exploit DB Packet Storm
210257 6.5 MEDIUM
Network 		intel data_center_manager Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access. CWE-281
 Improper Preservation of Permissions 		CVE-2020-12353 2024-11-21 13:59 2020-11-13 Show GitHub Exploit DB Packet Storm
210258 7.8 HIGH
Local 		intel extreme_tuning_utility Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access. NVD-CWE-noinfo
CVE-2020-12350 2024-11-21 13:59 2020-11-13 Show GitHub Exploit DB Packet Storm
210259 6.5 MEDIUM
Network 		intel data_center_manager Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access. CWE-20
 Improper Input Validation  		CVE-2020-12349 2024-11-21 13:59 2020-11-13 Show GitHub Exploit DB Packet Storm
210260 8.8 HIGH
Network 		intel data_center_manager Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via network access. CWE-20
 Improper Input Validation  		CVE-2020-12347 2024-11-21 13:59 2020-11-13 Show GitHub Exploit DB Packet Storm