Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230071 5.8 警告 phpay - Windows 上で稼動する phPay の main.php におけるディレクトリトラバーサル攻撃を実行される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6471 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230072 6.4 警告 phprpg - phpRPG におけるセッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6470 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230073 9.3 危険 phprpg - phpRPG の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6469 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230074 10 危険 planamesa - Planamesa NeoOffice の OpenOffice.org コードにおける脆弱性 CWE-noinfo
情報不足 		CVE-2007-6456 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230075 9.3 危険 SAP - Business Objects の RptViewerAX.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6254 2012-12-20 18:34 2008-03-19 Show GitHub Exploit DB Packet Storm
230076 6.8 警告 viart - ViArt CMS などの blocks/block_site_map.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6347 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230077 7.5 危険 Trivantis Corporation Inc. - Trivantis CourseMill Enterprise Learning Management System の userlogin.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6338 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230078 5 警告 sergey lyubka - Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6326 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230079 5 警告 xml2owl - xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6322 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230080 4.3 警告 Roundcube.net - RoundCube webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6321 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196701 8.8 HIGH
Network 		apple safari
ipados
iphone_os
tvos 		A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbit… CWE-787
 Out-of-bounds Write 		CVE-2020-9932 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196702 9.8 CRITICAL
Network 		apple mac_os_x A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A buffer overflow … CWE-120
Classic Buffer Overflow 		CVE-2020-9866 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196703 5.4 MEDIUM
Network 		apple safari A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. Processing a maliciously crafted URL may lead to arbitrary javascript code execu… NVD-CWE-Other
CVE-2020-9860 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196704 4.3 MEDIUM
Network 		apple mac_os_x An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-… NVD-CWE-Other
CVE-2020-9857 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196705 3.3 LOW
Local 		apple mac_os_x This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. An application may be able to trigg… NVD-CWE-noinfo
CVE-2020-9786 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196706 7.5 HIGH
Network 		apple mac_os_x A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 201… CWE-22
Path Traversal 		CVE-2020-9782 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196707 7.5 HIGH
Network 		apple mac_os_x An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Moja… CWE-311
Missing Encryption of Sensitive Data 		CVE-2020-9774 2024-11-21 14:41 2020-10-28 Show GitHub Exploit DB Packet Storm
196708 5.5 MEDIUM
Local 		apple mac_os_x
watchos 		An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, watchOS 6.2.8. A malicious application may disclose restricted memory. NVD-CWE-noinfo
CVE-2020-9997 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196709 7.1 HIGH
Local 		apple mac_os_x
iphone_os
watchos
tvos
ipados 		A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able … NVD-CWE-noinfo
CVE-2020-9994 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196710 7.8 HIGH
Local 		apple mac_os_x A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges. CWE-362
Race Condition 		CVE-2020-9990 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm