Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230381 4.3 警告 phpsysinfo - phpSysInfo の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4048 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
230382 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-4043 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
230383 9.3 危険 Yahoo! - Yahoo! Widgets の YDPCTL.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4034 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
230384 7.5 危険 webSPELL - Webspell の index.php における絶対パストラバーサルの脆弱性 - CVE-2007-4028 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
230385 6.8 警告 Telaxus LLC - epesi framework における任意の PHP コードを実行される脆弱性 - CVE-2007-4026 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
230386 4.3 警告 サン・マイクロシステムズ - Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 - CVE-2007-4025 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
230387 4.3 警告 w1l3d4 - W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4024 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
230388 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4014 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
230389 6.8 警告 virtual hosting control system - VHCS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-3988 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
230390 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 - CVE-2007-3986 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197231 6.7 MEDIUM
Local
intel visual_compute_accelerator_2_firmware Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access. NVD-CWE-noinfo
CVE-2020-8676 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
197232 5.5 MEDIUM
Local
intel
fedoraproject
debian
core_i7-8510y_firmware
core_i7-8500y_firmware
core_i5-8310y_firmware
core_i5-8210y_firmware
core_i5-8200y_firmware
core_m3-8100y_firmware
core_i7-7500u_firmware
core_i7-7510u_fir…
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. CWE-203
 Information Exposure Through Discrepancy
CVE-2020-8695 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
197233 5.5 MEDIUM
Local
intel core_i7-8510y_firmware
core_i7-8500y_firmware
core_i5-8310y_firmware
core_i5-8210y_firmware
core_i5-8200y_firmware
core_m3-8100y_firmware
core_i7-7500u_firmware
core_i7-7510u_fir…
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. NVD-CWE-Other
CVE-2020-8694 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
197234 5.9 MEDIUM
Network
netapp e-series_santricity_os_controller SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission withi… NVD-CWE-noinfo
CVE-2020-8577 2024-11-21 14:39 2020-11-7 Show GitHub Exploit DB Packet Storm
197235 7.5 HIGH
Network
netapp e-series_santricity_os_controller SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial of Service (DoS). NVD-CWE-noinfo
CVE-2020-8580 2024-11-21 14:39 2020-11-7 Show GitHub Exploit DB Packet Storm
197236 7.5 HIGH
Network
netapp clustered_data_ontap Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LIF to cause a Denial of Service (DoS). NVD-CWE-noinfo
CVE-2020-8579 2024-11-21 14:39 2020-10-27 Show GitHub Exploit DB Packet Storm
197237 3.3 LOW
Local
pulsesecure pulse_secure_desktop Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled. CWE-521
Weak Password Requirements 
CVE-2020-8956 2024-11-21 14:39 2020-10-27 Show GitHub Exploit DB Packet Storm
197238 5.3 MEDIUM
Network
google tink A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a secon… NVD-CWE-Other
CVE-2020-8929 2024-11-21 14:39 2020-10-19 Show GitHub Exploit DB Packet Storm
197239 5.4 MEDIUM
Network
webmin webmin An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visitin… CWE-79
Cross-site Scripting
CVE-2020-8821 2024-11-21 14:39 2020-10-13 Show GitHub Exploit DB Packet Storm
197240 5.4 MEDIUM
Network
webmin webmin An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting t… CWE-79
Cross-site Scripting
CVE-2020-8820 2024-11-21 14:39 2020-10-13 Show GitHub Exploit DB Packet Storm