Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229681 7.8 危険 rainbowsoft - Z-Blog におけるデータベースをダウンロードされる脆弱性 - CVE-2007-3083 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
229682 7.8 危険 sendcard - Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3082 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
229683 7.8 危険 zenturi - Zenturi ProgramChecker の sasatl.dll における任意のファイルをダウンロードされる脆弱性 - CVE-2007-3076 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
229684 7.5 危険 phpreactor - Reactor における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3066 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229685 5 警告 sendcard - SendCard における重要な情報を取得される脆弱性 - CVE-2007-3059 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229686 6.8 警告 XOOPS - XOOPS 用の icontent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3057 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229687 4.3 警告 WebSVN - WebSVN の filedetails.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3056 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229688 7.5 危険 postnuke software foundation - PostNuke 用の PNphpBB2 モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3052 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229689 7.5 危険 revokesoft - RevokeSoft RevokeBB の inc/class_users.php における SQL インジェクションの脆弱性 - CVE-2007-3051 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
229690 10 危険 Vonage - Vonage VoIP Telephone Adapter における管理アクセス権限を取得される脆弱性 - CVE-2007-3047 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210101 7.1 HIGH
Network 		redhat cloudforms_management_engine Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal netw… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-14296 2024-11-21 14:02 2020-08-11 Show GitHub Exploit DB Packet Storm
210102 9.8 CRITICAL
Network 		apache skywalking **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases. CWE-89
SQL Injection 		CVE-2020-13921 2024-11-21 14:02 2020-08-5 Show GitHub Exploit DB Packet Storm
210103 6.0 MEDIUM
Local 		gnu
redhat
opensuse
canonical 		grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux 		There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow lead… - CVE-2020-14311 2024-11-21 14:02 2020-08-1 Show GitHub Exploit DB Packet Storm
210104 6.0 MEDIUM
Local 		gnu
redhat
opensuse
canonical 		grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux 		There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with bu… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-14310 2024-11-21 14:02 2020-08-1 Show GitHub Exploit DB Packet Storm
210105 7.8 HIGH
Local 		pi-hole pi-hole An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root … CWE-78
CWE-269
OS Command 
 Improper Privilege Management 		CVE-2020-14162 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
210106 9.1 CRITICAL
Network 		abus secvest_hybrid_fumo50110_firmware The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to c… CWE-287
Improper Authentication 		CVE-2020-14158 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
210107 6.7 MEDIUM
Local 		gnu
opensuse 		grub2
leap 		There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ov… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-14309 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
210108 6.4 MEDIUM
Local 		gnu
opensuse 		grub2
leap 		In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-14308 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
210109 9.9 CRITICAL
Network 		kubevirt
redhat 		kubevirt
openshift_virtualization 		A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privilege… NVD-CWE-noinfo
CVE-2020-14316 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
210110 7.5 HIGH
Network 		shopware shopware In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. CWE-209
Information Exposure Through an Error Message 		CVE-2020-13997 2024-11-21 14:02 2020-07-29 Show GitHub Exploit DB Packet Storm