Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229591 6.4 警告 zephyrsoft toolbox - Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 - CVE-2007-1122 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229592 6.4 警告 zephyrsoft toolbox - Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 - CVE-2007-1121 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229593 9.3 危険 steema software - TeeChart Pro ActiveX コントロールにおける .tee ファイルをダウンロードされる脆弱性 - CVE-2007-1120 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229594 4.3 警告 phpwebgallery - Phpwebgallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1109 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229595 4.3 警告 The Tor Project - Tor における超過リソースを不当要求される脆弱性 - CVE-2007-1103 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229596 7.8 危険 pickle - Ahmet Sacan Pickle の download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1100 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229597 7.8 危険 scrymud - ScryMUD における脆弱性 - CVE-2007-1098 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229598 10 危険 wiclear - Wiclear の upload tool における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1097 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229599 6.8 警告 VirtueMart - VirtueMart の ps_cart.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1096 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
229600 7.5 危険 TYPO3 Association - TYPO3 用の class.t3lib_formmail.php における任意の電子メールヘッダを挿入される脆弱性 - CVE-2007-1081 2012-12-20 18:19 2007-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197281 4.3 MEDIUM
Network 		tecnick tcexam Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-5743 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
197282 7.8 HIGH
Local 		f5 nginx_controller On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the s… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-5895 2024-11-21 14:34 2020-05-7 Show GitHub Exploit DB Packet Storm
197283 8.1 HIGH
Network 		f5 nginx_controller On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out. CWE-384
 Session Fixation 		CVE-2020-5894 2024-11-21 14:34 2020-05-7 Show GitHub Exploit DB Packet Storm
197284 6.5 MEDIUM
Network 		blueonyx 5209r_firmware CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis. CWE-352
 Origin Validation Error 		CVE-2020-5517 2024-11-21 14:34 2020-05-6 Show GitHub Exploit DB Packet Storm
197285 4.6 MEDIUM
Physics 		simplisafe ss3_firmware Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system. CWE-287
Improper Authentication 		CVE-2020-5727 2024-11-21 14:34 2020-05-3 Show GitHub Exploit DB Packet Storm
197286 6.7 MEDIUM
Local 		f5 big-ip_access_policy_manager
big-ip_edge_gateway
big-ip_access_policy_manager_client 		In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory. NVD-CWE-noinfo
CVE-2020-5892 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm
197287 5.5 MEDIUM
Local 		f5 big-iq_centralized_management
big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big… 		On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication o… CWE-200
Information Exposure 		CVE-2020-5890 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm
197288 8.1 HIGH
Adjacent 		f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<… 		On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for adjacent network (layer 2) attackers to access local daemons and bypass port … NVD-CWE-noinfo
CVE-2020-5888 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm
197289 3.7 LOW
Network 		f5 big-ip_access_policy_manager
big-ip_access_policy_manager_client 		In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for cap… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5893 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm
197290 5.4 MEDIUM
Network 		f5 big-ip_access_policy_manager On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTT… CWE-79
Cross-site Scripting 		CVE-2020-5889 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm