Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230371 6.9 警告 zonelabs - Check Point Zone Labs ZoneAlarm の vsdatant.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2083 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230372 7.5 危険 xampp - Windows 用の XAMPP における SQL インジェクションの脆弱性 - CVE-2007-2080 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230373 9.3 危険 xampp - Windows 用の XAMPP におけるバッファオーバーフローの脆弱性 - CVE-2007-2079 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230374 6.9 警告 scramdisk 4 linux - ScramDisk 4 Linux における権限を取得される脆弱性 - CVE-2007-2075 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230375 4.6 警告 scramdisk 4 linux - ScramDisk 4 Linux のコンテナ内の特定のプログラムにおける権限を取得される脆弱性 - CVE-2007-2074 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230376 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2070 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230377 6.8 警告 storefront for gallery - Gallery の StoreFront mods における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2068 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230378 7.5 危険 webslider - Marco Antonio Islas Cruz WebSlider における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2067 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
230379 5 警告 usebb - UseBB における重要な情報を取得される脆弱性 - CVE-2007-2066 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
230380 4.4 警告 SSH コミュニケーションズ・セキュリティ - IBM z/OS 用の SSH Tectia Server における任意のプロセスを停止される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2063 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197431 9.8 CRITICAL
Network 		iteris vantage_velocity_firmware Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password ec… CWE-521
Weak Password Requirements  		CVE-2020-9023 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197432 6.1 MEDIUM
Network 		cambiumnetworks xh2-120_firmware
xr2436_firmware
xr520_firmware
xr620_firmware 		An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-9022 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197433 9.8 CRITICAL
Network 		postoaktraffic awam_bluetooth_field_device_firmware Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.p… CWE-78
OS Command  		CVE-2020-9021 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197434 9.8 CRITICAL
Network 		iteris vantage_velocity_firmware Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field. CWE-78
OS Command  		CVE-2020-9020 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197435 7.5 HIGH
Network 		microchip syncserver_s100_firmware
syncserver_s200_firmware
syncserver_s250_firmware
syncserver_s300_firmware
syncserver_s350_firmware 		Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of us… NVD-CWE-noinfo
CVE-2020-9034 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197436 5.4 MEDIUM
Network 		dolibarr dolibarr_erp\/crm Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header. CWE-79
Cross-site Scripting 		CVE-2020-9016 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197437 4.3 MEDIUM
Network 		arvato skillpipe Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code. CWE-20
 Improper Input Validation  		CVE-2020-9013 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197438 6.1 MEDIUM
Network 		gluu gluu_server A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parame… CWE-79
Cross-site Scripting 		CVE-2020-9012 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197439 5.4 MEDIUM
Network 		codologic codoforum Codoforum 4.8.8 allows self-XSS via the title of a new topic. CWE-79
Cross-site Scripting 		CVE-2020-9007 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197440 8.8 HIGH
Adjacent 		abbott freestyle_libre_firmware Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not presen… CWE-787
 Out-of-bounds Write 		CVE-2020-8997 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm