Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230301 7.8 危険 tony cook - Imager perl モジュールの BMP リーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-2459 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
230302 7.5 危険 pixaria - Pixaria Gallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-2458 2012-12-20 18:19 2007-04-15 Show GitHub Exploit DB Packet Storm
230303 7.5 危険 pixaria - Pixaria Gallery の resources/includes/class.Smarty.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2457 2012-12-20 18:19 2007-04-15 Show GitHub Exploit DB Packet Storm
230304 2.1 注意 CollabNet, Inc. - Subversion における重要な情報 (プロパティの改定) を取得される脆弱性 - CVE-2007-2448 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230305 6.8 警告 tecnick.com - TCExam の shared/config/tce_config.php におけるクロスサイトスクリプティング攻撃 (XSS) を実行される脆弱性 - CVE-2007-2431 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
230306 7.8 危険 tecnick.com - TCExam の shared/code/tce_tmx.php における cache/ 配下の任意の PHP ファイルを作成される脆弱性 - CVE-2007-2430 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
230307 7.5 危険 pnflashgames - PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性 - CVE-2007-2427 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
230308 7.5 危険 wildbits - WordPress 用の myGallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2426 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
230309 7.5 危険 the merchant project - themerchant の help/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2424 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
230310 10 危険 RSAセキュリティ
Progress Software Corporation
- 複数の RSA 製品で使用される Progress Software Progress および OpenEdge におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2417 2012-12-20 18:19 2007-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210311 4.7 MEDIUM
Network
oracle cloud_infrastructure_identity_and_access_management Vulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle Cloud Services. Easily exploitable vulnerability allows high privileged attacker with network access … NVD-CWE-noinfo
CVE-2020-14874 2024-11-21 14:04 2020-12-23 Show GitHub Exploit DB Packet Storm
210312 5.9 MEDIUM
Network
askey ap5100w_firmware Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exc… CWE-330
 Use of Insufficiently Random Values
CVE-2020-15023 2024-11-21 14:04 2020-12-12 Show GitHub Exploit DB Packet Storm
210313 9.8 CRITICAL
Network
oracle fusion_middleware Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.… NVD-CWE-noinfo
CVE-2020-14750 2024-11-21 14:04 2020-11-3 Show GitHub Exploit DB Packet Storm
210314 4.8 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS. CWE-79
Cross-site Scripting
CVE-2020-15004 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm
210315 4.3 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access). NVD-CWE-noinfo
CVE-2020-15003 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm
210316 5.0 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-15002 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm
210317 4.9 MEDIUM
Network
oracle database Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged attacker having Analyze… NVD-CWE-noinfo
CVE-2020-14901 2024-11-21 14:04 2020-10-22 Show GitHub Exploit DB Packet Storm
210318 5.4 MEDIUM
Network
oracle application_express Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows lo… NVD-CWE-noinfo
CVE-2020-14900 2024-11-21 14:04 2020-10-22 Show GitHub Exploit DB Packet Storm
210319 5.4 MEDIUM
Network
oracle application_express Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low… NVD-CWE-noinfo
CVE-2020-14899 2024-11-21 14:04 2020-10-22 Show GitHub Exploit DB Packet Storm
210320 5.4 MEDIUM
Network
oracle application_express Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low… NVD-CWE-noinfo
CVE-2020-14898 2024-11-21 14:04 2020-10-22 Show GitHub Exploit DB Packet Storm