Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229791 4.3 警告 ZoneO-soft - phpTrafficA の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3426 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229792 5 警告 ZoneO-soft - phpTrafficA の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3425 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229793 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3424 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229794 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3423 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229795 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3422 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229796 7.5 危険 web-app.org - web-app.org WebAPP のログイン機能などにおける脆弱性 - CVE-2007-3421 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229797 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3420 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229798 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/user.pl における脆弱性 - CVE-2007-3419 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229799 6.5 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/forum_display.pl における他のユーザになりすまされる脆弱性 - CVE-2007-3418 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229800 4.3 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3417 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210221 7.8 HIGH
Local
rockwellautomation factorytalk_view The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows… CWE-326
Inadequate Encryption Strength
CVE-2020-14481 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210222 5.5 MEDIUM
Local
rockwellautomation factorytalk_view Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2020-14480 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210223 7.1 HIGH
Local
rockwellautomation factorytalk_services_platform A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a … CWE-611
XXE
CVE-2020-14478 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210224 9.8 CRITICAL
Network
mitsubishielectric cw_configurator
mi_configurator
gx_works3
gx_works2
melsoft_iq_appportal
melsoft_navigator
mr_configurator2
mt_works2
mx_component
rt_toolbox3
fr_configurator2
iu_dev…
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code. CWE-22
Path Traversal
CVE-2020-14523 2024-11-21 14:03 2022-02-12 Show GitHub Exploit DB Packet Storm
210225 9.8 CRITICAL
Network
mitsubishielectric cw_configurator
gx_logviewer
melfa-works
rt_toolbox2
fr_configurator_sw3
fr_configurator2
m_commdtm-io-link
melsec_wincpu_setting_utility
melsoft_em_software_development_kit
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, m… CWE-276
Incorrect Default Permissions 
CVE-2020-14521 2024-11-21 14:03 2022-02-12 Show GitHub Exploit DB Packet Storm
210226 6.1 MEDIUM
Network
cacti cacti Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme. CWE-79
Cross-site Scripting
CVE-2020-14424 2024-11-21 14:03 2021-11-15 Show GitHub Exploit DB Packet Storm
210227 6.3 MEDIUM
Network
redhat 3scale_api_management A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal … NVD-CWE-Other
CVE-2020-14388 2024-11-21 14:03 2021-06-2 Show GitHub Exploit DB Packet Storm
210228 7.5 HIGH
Network
redhat satellite An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the pri… - CVE-2020-14380 2024-11-21 14:03 2021-06-2 Show GitHub Exploit DB Packet Storm
210229 6.5 MEDIUM
Network
redhat satellite A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite. - CVE-2020-14371 2024-11-21 14:03 2021-06-2 Show GitHub Exploit DB Packet Storm
210230 5.9 MEDIUM
Network
redhat
oracle
xnio
jboss_operations_network
jboss_enterprise_application_platform
jboss_fuse
jboss_data_grid
jboss_brms
jboss_soa_platform
jboss_data_virtualization
communications_cloud_nat…
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial… NVD-CWE-Other
CVE-2020-14340 2024-11-21 14:03 2021-06-2 Show GitHub Exploit DB Packet Storm