Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230061 7.5 危険 xecms - xeCMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6508 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230062 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect における "ファイルシステムの全アクセス権限" を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6507 2012-12-20 18:34 2007-07-27 Show GitHub Exploit DB Packet Storm
230063 4.9 警告 plain black - Plain Black WebGUI における管理アカウントを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6487 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230064 6.8 警告 phprpg - phpRPG の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6484 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230065 7.8 危険 サン・マイクロシステムズ - Sun Ray Server Software の utdevmgrd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6482 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
230066 6.4 警告 サン・マイクロシステムズ - Sun Ray Server Software の utdevmgrd における任意のディレクトリを削除される脆弱性 CWE-DesignError
CVE-2007-6481 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
230067 9.4 危険 サン・マイクロシステムズ - Sun MC の Oracle データベースコンポーネントにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2007-6480 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
230068 6.8 警告 rosoftengineering - Rosoft Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6478 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230069 5.8 警告 texas imperial software - Texas Imperial Software WFTPD Pro Explorer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6473 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230070 7.5 危険 phpmyrealty - PMR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6472 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200651 3.5 LOW
Network 		viewvc viewvc ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges… CWE-79
Cross-site Scripting 		CVE-2020-5283 2024-11-21 14:33 2020-04-3 Show GitHub Exploit DB Packet Storm
200652 6.5 MEDIUM
Network 		ctfd rctf In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint. An attacker team could poten… CWE-384
 Session Fixation 		CVE-2020-5290 2024-11-21 14:33 2020-04-2 Show GitHub Exploit DB Packet Storm
200653 9.8 CRITICAL
Network 		dell idrac7_firmware
idrac8_firmware
idrac9_firmware 		Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulner… CWE-787
 Out-of-bounds Write 		CVE-2020-5344 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
200654 8.8 HIGH
Network 		leantime leantime Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/attackers can execute arbitrary SQL queries negatively affecting the confidentiali… CWE-89
SQL Injection 		CVE-2020-5292 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
200655 7.8 HIGH
Local 		projectatomic
debian
archlinux
centos 		bubblewrap
debian_linux
arch_linux
centos 		Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process kee… CWE-269
 Improper Privilege Management 		CVE-2020-5291 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
200656 6.5 MEDIUM
Network 		elide elide In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model. The ad… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2020-5289 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
200657 4.3 MEDIUM
Network 		zeit next.js Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the… CWE-22
Path Traversal 		CVE-2020-5284 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
200658 8.1 HIGH
Network 		sensiolabs symfony In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides … CWE-863
 Incorrect Authorization 		CVE-2020-5275 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
200659 5.4 MEDIUM
Network 		sensiolabs symfony In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHandler` rendered it stacktrace. In addition, the stacktrace were displayed even … CWE-209
Information Exposure Through an Error Message 		CVE-2020-5274 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
200660 4.3 MEDIUM
Network 		sensiolabs symfony In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the r… CWE-20
 Improper Input Validation  		CVE-2020-5255 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm