Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230371 6.9 警告 zonelabs - Check Point Zone Labs ZoneAlarm の vsdatant.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2083 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230372 7.5 危険 xampp - Windows 用の XAMPP における SQL インジェクションの脆弱性 - CVE-2007-2080 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230373 9.3 危険 xampp - Windows 用の XAMPP におけるバッファオーバーフローの脆弱性 - CVE-2007-2079 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230374 6.9 警告 scramdisk 4 linux - ScramDisk 4 Linux における権限を取得される脆弱性 - CVE-2007-2075 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230375 4.6 警告 scramdisk 4 linux - ScramDisk 4 Linux のコンテナ内の特定のプログラムにおける権限を取得される脆弱性 - CVE-2007-2074 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230376 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2070 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230377 6.8 警告 storefront for gallery - Gallery の StoreFront mods における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2068 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230378 7.5 危険 webslider - Marco Antonio Islas Cruz WebSlider における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2067 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230379 5 警告 usebb - UseBB における重要な情報を取得される脆弱性 - CVE-2007-2066 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
230380 4.4 警告 SSH コミュニケーションズ・セキュリティ - IBM z/OS 用の SSH Tectia Server における任意のプロセスを停止される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2063 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197411 6.5 MEDIUM
Network 		nextcloud
fedoraproject 		nextcloud_server
fedora 		A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL. CWE-862
 Missing Authorization 		CVE-2020-8139 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197412 6.5 MEDIUM
Network 		nextcloud nextcloud_server A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar U… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8138 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197413 9.8 CRITICAL
Network 		blamer_project blamer Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker. CWE-94
Code Injection 		CVE-2020-8137 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197414 7.5 HIGH
Network 		fastify fastify-multipart Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8136 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197415 9.8 CRITICAL
Network 		uppy uppy The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal system… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8135 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197416 8.1 HIGH
Network 		ghost ghost Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8134 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197417 9.8 CRITICAL
Network 		liferay liferay_portal Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS). CWE-502
 Deserialization of Untrusted Data 		CVE-2020-7961 2024-11-21 14:38 2020-03-21 Show GitHub Exploit DB Packet Storm
197418 7.5 HIGH
Network 		trendmicro officescan
apex_one
worry-free_business_security 		Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the serve… NVD-CWE-noinfo
CVE-2020-8470 2024-11-21 14:38 2020-03-18 Show GitHub Exploit DB Packet Storm
197419 8.8 HIGH
Network 		trendmicro officescan
apex_one
worry-free_business_security 		Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipula… CWE-74
Injection 		CVE-2020-8468 2024-11-21 14:38 2020-03-18 Show GitHub Exploit DB Packet Storm
197420 8.8 HIGH
Network 		trendmicro officescan
apex_one 		A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An a… NVD-CWE-noinfo
CVE-2020-8467 2024-11-21 14:38 2020-03-18 Show GitHub Exploit DB Packet Storm