Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230331 10 危険 SilverStripe - SilverStripe の検索機能における脆弱性 - CVE-2007-2321 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230332 7.5 危険 VWar - PHP-Nuke 用の VWar モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2312 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230333 7.5 危険 webkalk2 - WebKalk2 の engine/engine.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2307 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230334 4.3 警告 VWar - PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2306 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230335 7.5 危険 qdblog - QDBlog の authenticate.php における SQL インジェクションの脆弱性 - CVE-2007-2305 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230336 7.5 危険 qdblog - QDBlog におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2304 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230337 4.3 警告 surat kabar - Endy Kristanto Surat kabar / News Management Online におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2300 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230338 7.5 危険 wf-links - XOOPS 用の WF-Links モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2373 2012-12-20 18:19 2005-06-22 Show GitHub Exploit DB Packet Storm
230339 9.3 危険 シマンテック - Windows 用の Symantec Storage Foundation における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2279 2012-12-20 18:19 2007-06-1 Show GitHub Exploit DB Packet Storm
230340 7.5 危険 Plogger Project - Plogger におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2277 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213631 6.3 MEDIUM
Adjacent 		bluetooth bluetooth_core Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates differen… CWE-436
 Interpretation Conflict 		CVE-2020-10134 2024-11-21 13:54 2020-05-20 Show GitHub Exploit DB Packet Storm
213632 8.8 HIGH
Network 		powerdns recursor An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memor… CWE-125
Out-of-bounds Read 		CVE-2020-10030 2024-11-21 13:54 2020-05-20 Show GitHub Exploit DB Packet Storm
213633 7.8 HIGH
Local 		zephyrproject zephyr A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from d… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-10067 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213634 6.5 MEDIUM
Network 		zephyrproject zephyr In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would re… CWE-824
 Access of Uninitialized Pointer 		CVE-2020-10060 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213635 4.8 MEDIUM
Network 		zephyrproject zephyr The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using D… CWE-295
Improper Certificate Validation  		CVE-2020-10059 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213636 7.8 HIGH
Local 		zephyrproject zephyr Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: ze… CWE-20
 Improper Input Validation  		CVE-2020-10058 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213637 7.8 HIGH
Local 		zephyrproject zephyr Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions. CWE-20
 Improper Input Validation  		CVE-2020-10028 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213638 7.8 HIGH
Local 		zephyrproject zephyr An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and … CWE-697
 Incorrect Comparison 		CVE-2020-10027 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213639 7.8 HIGH
Local 		zephyrproject zephyr The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to … CWE-697
 Incorrect Comparison 		CVE-2020-10024 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm
213640 6.8 MEDIUM
Physics 		zephyrproject zephyr The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in denial of service or possibly code execution… CWE-120
Classic Buffer Overflow 		CVE-2020-10023 2024-11-21 13:54 2020-05-12 Show GitHub Exploit DB Packet Storm