Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230321	6.8	警告	シマンテック	-	Symantec Norton Ghost などの製品における資格情報を取得される脆弱性	-	CVE-2007-2360	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

230322	7.2	危険	シマンテック	-	Symantec Norton Ghost などの製品で使用される Ghost Service Manager におけるバッファオーバーフローの脆弱性	-	CVE-2007-2359	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

230323	6.8	警告	sinecms	-	SineCms の mods/Core/result.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2357	2012-12-20 18:19	2007-04-30	Show	GitHub Exploit DB Packet Storm

230324	7.8	危険	Progress Software Corporation	-	Progress Webspeed Messenger における重要な情報を取得される脆弱性	-	CVE-2007-2354	2012-12-20 18:19	2007-04-30	Show	GitHub Exploit DB Packet Storm

230325	7.5	危険	php-generics	-	PHP-Generics における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2346	2012-12-20 18:19	2007-04-27	Show	GitHub Exploit DB Packet Storm

230326	7.5	危険	phpbandmanager	-	phpBandManager の suite/index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2341	2012-12-20 18:19	2007-04-27	Show	GitHub Exploit DB Packet Storm

230327	6.8	警告	phporacleview	-	phporacleview の inc/include_all.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2340	2012-12-20 18:19	2007-04-27	Show	GitHub Exploit DB Packet Storm

230328	7.5	危険	shop-script	-	Shop-Script の cart.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2331	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

230329	7.5	危険	searchactivity	-	Searchactivity の searchbot.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2329	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

230330	7.5	危険	phpmytgp	-	phpMYTGP の addvip.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2328	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197271	4.9	MEDIUM Network	isc fedoraproject opensuse debian canonical netapp	bind fedora leap debian_linux ubuntu_linux steelstore_cloud_integrated_storage	In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative s…	CWE-404 Improper Resource Shutdown or Release	CVE-2020-8619	2024-11-21 14:39	2020-06-18	Show	GitHub Exploit DB Packet Storm

197272	6.5	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.3 allows SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8544	2024-11-21 14:39	2020-06-16	Show	GitHub Exploit DB Packet Storm

197273	7.5	HIGH Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.3 has Improper Input Validation.	CWE-20 Improper Input Validation	CVE-2020-8543	2024-11-21 14:39	2020-06-16	Show	GitHub Exploit DB Packet Storm

197274	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-8542	2024-11-21 14:39	2020-06-16	Show	GitHub Exploit DB Packet Storm

197275	6.8	MEDIUM Network	huawei	p30_firmware p30_pro_firmware tony-al00b_firmware	HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper …	CWE-287 Improper Authentication	CVE-2020-9076	2024-11-21 14:39	2020-06-16	Show	GitHub Exploit DB Packet Storm

197276	6.5	MEDIUM Network	huawei	secospace_usg6300_firmware secospace_usg6600_firmware usg6300e_firmware	Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification…	CWE-20 Improper Input Validation	CVE-2020-9075	2024-11-21 14:39	2020-06-16	Show	GitHub Exploit DB Packet Storm

197277	6.8	MEDIUM Physics	intel	innovation_engine_firmware	Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of pri…	NVD-CWE-noinfo	CVE-2020-8675	2024-11-21 14:39	2020-06-15	Show	GitHub Exploit DB Packet Storm

197278	5.3	MEDIUM Network	intel	active_management_technology_firmware service_manager	Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable informa…	CWE-125 Out-of-bounds Read	CVE-2020-8674	2024-11-21 14:39	2020-06-15	Show	GitHub Exploit DB Packet Storm

197279	5.4	MEDIUM Network	openbrowser_project	openbrowser	OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated]	CWE-276 Incorrect Default Permissions	CVE-2020-8954	2024-11-21 14:39	2020-06-9	Show	GitHub Exploit DB Packet Storm

197280	8.8	HIGH Network	couchbase	couchbase_server	In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request.	CWE-352 Origin Validation Error	CVE-2020-9042	2024-11-21 14:39	2020-06-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed