Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230351 6.8 警告 php-tools - patBBcode の examples/patExampleGen/bbcodeSource.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5995 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
230352 6.8 警告 yappa-ng - Fritz Berger yappa-ng の check_noimage.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5994 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
230353 4.3 警告 vtls - VTLS vtls.web.gateway の Visionary Technology におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5993 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
230354 6.8 警告 Skype Technologies S.A. - Skype の skype4com URI ハンドラにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2007-5989 2012-12-20 18:33 2007-12-13 Show GitHub Exploit DB Packet Storm
230355 4.3 警告 X7 Group - X7 Chat におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5982 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
230356 7.5 危険 XOOPS - XOOPS 用の mylinks モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5978 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
230357 3.5 注意 The phpMyAdmin Project - phpMyAdmin の db_create.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5977 2012-12-20 18:33 2007-11-11 Show GitHub Exploit DB Packet Storm
230358 6.5 警告 The phpMyAdmin Project - phpMyAdmin の db_create.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5976 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
230359 6.5 警告 torrentstrike - TBSource の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5975 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
230360 5 警告 really simple caldav store - RSCDS における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2007-5953 2012-12-20 18:33 2007-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210041 5.3 MEDIUM
Local
microsoft powershellget <p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) po… NVD-CWE-noinfo
CVE-2020-16886 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210042 7.8 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
<p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated… NVD-CWE-noinfo
CVE-2020-16885 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210043 7.1 HIGH
Local
microsoft windows_server_2016
windows_10
<p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targe… NVD-CWE-noinfo
CVE-2020-16877 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210044 7.1 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
<p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnera… NVD-CWE-noinfo
CVE-2020-16876 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210045 7.5 HIGH
Network
microsoft windows_server_2008
windows_7
<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successful… NVD-CWE-noinfo
CVE-2020-16863 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210046 8.8 HIGH
Network
zohocorp manageengine_applications_manager Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. CWE-89
SQL Injection
CVE-2020-16267 2024-11-21 14:07 2020-10-7 Show GitHub Exploit DB Packet Storm
210047 7.8 HIGH
Local
msi ambientlink_mslo64_firmware The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). CWE-787
 Out-of-bounds Write
CVE-2020-17382 2024-11-21 14:07 2020-10-2 Show GitHub Exploit DB Packet Storm
210048 6.8 MEDIUM
Network
istio istio In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or n… NVD-CWE-noinfo
CVE-2020-16844 2024-11-21 14:07 2020-10-2 Show GitHub Exploit DB Packet Storm
210049 6.1 MEDIUM
Network
ge s2020_firmware
s2024_firmware
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, … - CVE-2020-16242 2024-11-21 14:07 2020-09-26 Show GitHub Exploit DB Packet Storm
210050 7.8 HIGH
Local
pango hotspot_shield Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. Th… CWE-59
CWE-732
Link Following
 Incorrect Permission Assignment for Critical Resource
CVE-2020-17365 2024-11-21 14:07 2020-09-25 Show GitHub Exploit DB Packet Storm