Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229621 7.5 危険 tomasz rekawek - Yaap の includes/common.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2664 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229622 7.8 危険 precisionid barcode - PrecisionID_DataMatrix.DLL の PrecisionID Barcode ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2657 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229623 4.4 警告 SUSE
xfsdump
- xfsdump の xfs_fsr における xfs ファイルシステム上で任意のファイルを上書きされる脆弱性 CWE-362
CWE-Other
CVE-2007-2654 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
229624 7.5 危険 voodoo circle - VooDoo cIRCle におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2651 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229625 7.8 危険 t-com - T-com Speedport W 700v における遅延を回避される脆弱性 - CVE-2007-2649 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229626 6.8 警告 yenc32 - yEnc32 におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2646 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229627 5 警告 pinkcrow designs - PinkCrow Designs Gallery または maGAZIn の phpThumb.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2643 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
229628 7.8 危険 r2k - R2K Gallery の galeria.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2642 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
229629 7.5 危険 w1l3d4 - W1L3D4 Philboard の W1L3D4_bolum.asp における SQL インジェクションの脆弱性 - CVE-2007-2641 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
229630 10 危険 prosysinfo - TFTPdWin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2639 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210091 5.5 MEDIUM
Local
sqlite
fedoraproject
sqlite
fedora
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CWE-476
 NULL Pointer Dereference
CVE-2020-13435 2024-11-21 14:01 2020-05-25 Show GitHub Exploit DB Packet Storm
210092 5.5 MEDIUM
Local
sqlite
debian
fedoraproject
canonical
freebsd
oracle
apple
sqlite
debian_linux
fedora
ubuntu_linux
freebsd
outside_in_technology
communications_network_charging_and_control
communications_cloud_native_core_policy
iphone_os
watchos<…
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. CWE-190
 Integer Overflow or Wraparound
CVE-2020-13434 2024-11-21 14:01 2020-05-25 Show GitHub Exploit DB Packet Storm
210093 9.8 CRITICAL
Network
adminpanel_project adminpanel Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter. CWE-89
SQL Injection
CVE-2020-13433 2024-11-21 14:01 2020-05-25 Show GitHub Exploit DB Packet Storm
210094 6.1 MEDIUM
Network
grafana grafana Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. CWE-79
Cross-site Scripting
CVE-2020-13430 2024-11-21 14:01 2020-05-25 Show GitHub Exploit DB Packet Storm
210095 5.4 MEDIUM
Network
grafana piechart-panel legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option. CWE-79
Cross-site Scripting
CVE-2020-13429 2024-11-21 14:01 2020-05-25 Show GitHub Exploit DB Packet Storm
210096 7.1 HIGH
Adjacent
thetrackr trackr_firmware TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted. CWE-862
 Missing Authorization
CVE-2020-13425 2024-11-21 14:01 2020-05-24 Show GitHub Exploit DB Packet Storm
210097 6.5 MEDIUM
Network
xcloner xcloner The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure. NVD-CWE-noinfo
CVE-2020-13424 2024-11-21 14:01 2020-05-24 Show GitHub Exploit DB Packet Storm
210098 9.8 CRITICAL
Network
aviatrix controller
gateway
vpn_client
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain O… NVD-CWE-noinfo
CVE-2020-13417 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
210099 6.5 MEDIUM
Network
aviatrix controller An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Reque… CWE-352
 Origin Validation Error
CVE-2020-13416 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm
210100 7.5 HIGH
Network
aviatrix controller An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired o… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-13415 2024-11-21 14:01 2020-05-23 Show GitHub Exploit DB Packet Storm