Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230001 7.5 危険 xcms - XCMS の cpie.php における静的コードを直接挿入する攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6652 2012-12-20 18:34 2008-01-4 Show GitHub Exploit DB Packet Storm
230002 5 警告 sanybee gallery - SanyBee Gallery の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6648 2012-12-20 18:34 2008-01-4 Show GitHub Exploit DB Packet Storm
230003 7.5 危険 W-Agora - w-Agora の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6647 2012-12-20 18:34 2008-01-4 Show GitHub Exploit DB Packet Storm
230004 6.8 警告 xml2owl - xml2owl の showCode.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6632 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
230005 6.8 警告 pnphpbb - PNphpBB2 の printview.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6624 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
230006 5 警告 zeuscms - ZeusCMS における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6623 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
230007 7.5 危険 zeuscms - ZeusCMS の security.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6622 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
230008 4.3 警告 simpleforum - SimpleForum の simpleforum.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6616 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
230009 5.8 警告 skyfex - SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6605 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
230010 5 警告 xcms - XCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6604 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200751 9.8 CRITICAL
Network 		python
canonical
debian
fedoraproject 		pillow
ubuntu_linux
debian_linux
fedora 		libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CWE-120
Classic Buffer Overflow 		CVE-2020-5312 2024-11-21 14:33 2020-01-3 Show GitHub Exploit DB Packet Storm
200752 9.8 CRITICAL
Network 		python
debian
canonical
fedoraproject 		pillow
debian_linux
ubuntu_linux
fedora 		libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. CWE-120
Classic Buffer Overflow 		CVE-2020-5311 2024-11-21 14:33 2020-01-3 Show GitHub Exploit DB Packet Storm
200753 8.8 HIGH
Network 		python
canonical
fedoraproject 		pillow
ubuntu_linux
fedora 		libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-5310 2024-11-21 14:33 2020-01-3 Show GitHub Exploit DB Packet Storm
200754 7.2 HIGH
Network 		comtechtel stampede_fx-1010_firmware Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the T… CWE-78
OS Command  		CVE-2020-5179 2024-11-21 14:33 2020-01-2 Show GitHub Exploit DB Packet Storm
200755 3.3 LOW
Local 		ibm financial_transaction_manager IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force I… NVD-CWE-noinfo
CVE-2020-4556 2024-11-21 14:32 2023-03-16 Show GitHub Exploit DB Packet Storm
200756 5.9 MEDIUM
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An a… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-4497 2024-11-21 14:32 2022-12-15 Show GitHub Exploit DB Packet Storm
200757 7.5 HIGH
Network 		hcltech verse The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the… CWE-326
Inadequate Encryption Strength 		CVE-2020-4099 2024-11-21 14:32 2022-11-2 Show GitHub Exploit DB Packet Storm
200758 6.5 MEDIUM
Network 		ibm
netapp 		cognos_analytics
oncommand_insight 		IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th… CWE-352
 Origin Validation Error 		CVE-2020-4301 2024-11-21 14:32 2022-09-2 Show GitHub Exploit DB Packet Storm
200759 7.5 HIGH
Network 		ibm qradar_network_security IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to mount further attacks against the system. IBM X-Force ID: 174339. CWE-200
Information Exposure 		CVE-2020-4159 2024-11-21 14:32 2022-07-13 Show GitHub Exploit DB Packet Storm
200760 7.5 HIGH
Network 		ibm qradar_network_security IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to exter… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-4157 2024-11-21 14:32 2022-07-13 Show GitHub Exploit DB Packet Storm