Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229731	3.5	注意	xmb software	-	XMB U2U Instant Messenger の memcp.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-0519	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229732	7.5	危険	Scriptsez.net	-	Scriptsez Smart PHP Subscriber におけるエンコードされたパスワードを取得される脆弱性	-	CVE-2007-0518	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229733	7.5	危険	Scriptsez.net	-	Scriptsez Random PHP Quote におけるパスワード情報を取得される脆弱性	-	CVE-2007-0517	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229734	4.9	警告	yana framework	-	Yana Framework における任意のゲストブックプロファイルを変更される脆弱性	CWE-noinfo 情報不足	CVE-2007-0516	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229735	6.8	警告	phpxmldom	-	phpXD における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0511	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229736	10	危険	vote pro	-	Vote! Pro の poll_frame.php における任意の PHP コードを実行される脆弱性	-	CVE-2007-0504	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229737	7.5	危険	webSPELL	-	webSPELL の gallery.php における SQL インジェクションの脆弱性	-	CVE-2007-0502	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229738	6.8	警告	sangwan kim	-	Sangwan Kim phpIndexPage の config.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-0499	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229739	7.5	危険	sky gunning	-	MySpeach の up.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0498	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

229740	6.8	警告	upload-service	-	Upload-Service の upload/top.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0497	2012-12-20 18:19	2007-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197151	7.5	HIGH Network	rockwellautomation	flex_i\/o_1794-aent\/b_firmware	An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of…	CWE-120 Classic Buffer Overflow	CVE-2020-6086	2024-11-21 14:35	2020-10-14	Show	GitHub Exploit DB Packet Storm

197152	8.8	HIGH Network	google debian opensuse fedoraproject	chrome debian_linux leap fedora backports_sle	Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-787 CWE-416 Out-of-bounds Write Use After Free	CVE-2020-6576	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197153	8.3	HIGH Network	google debian opensuse fedoraproject	chrome debian_linux leap fedora backports_sle	Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.	CWE-362 Race Condition	CVE-2020-6575	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197154	7.8	HIGH Local	google opensuse debian fedoraproject	chrome leap backports_sle debian_linux fedora	Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary.	NVD-CWE-Other	CVE-2020-6574	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197155	9.6	CRITICAL Network	google debian opensuse fedoraproject	chrome debian_linux leap fedora backports_sle	Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTM…	CWE-416 Use After Free	CVE-2020-6573	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197156	4.3	MEDIUM Network	google opensuse fedoraproject debian	chrome leap backports_sle fedora debian_linux	Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.	CWE-20 Improper Input Validation	CVE-2020-6571	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197157	4.3	MEDIUM Network	google opensuse fedoraproject debian	chrome leap backports_sle fedora debian_linux	Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.	CWE-200 Information Exposure	CVE-2020-6570	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197158	6.3	MEDIUM Network	google debian opensuse fedoraproject	chrome debian_linux leap backports_sle fedora	Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2020-6569	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197159	6.5	MEDIUM Network	google debian opensuse fedoraproject	chrome debian_linux leap backports_sle fedora	Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.	NVD-CWE-Other	CVE-2020-6568	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

197160	6.5	MEDIUM Network	google debian opensuse fedoraproject	chrome debian_linux leap backports_sle fedora	Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pa…	CWE-20 Improper Input Validation	CVE-2020-6567	2024-11-21 14:35	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed