Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230391 7.5 危険 runcms - RunCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6544 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
230392 6.8 警告 winuae - WinUAE の zfile.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6537 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
230393 6.8 警告 ヤフー株式会社 - Yahoo! Toolbar の YShortcut.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6535 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
230394 10 危険 Tiki Software Community Association - TikiWiki における脆弱性 CWE-noinfo
情報不足 		CVE-2007-6529 2012-12-20 18:34 2007-12-22 Show GitHub Exploit DB Packet Storm
230395 5 警告 Tiki Software Community Association - TikiWiki の tiki-listmovies.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6528 2012-12-20 18:34 2007-12-22 Show GitHub Exploit DB Packet Storm
230396 5.8 警告 rickard andersson - PunBB 用の imgUpload モジュールを伴う Automatic Image Upload における任意のコンテンツをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6527 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
230397 4.3 警告 Tiki Software Community Association - TikiWiki の tiki-special_chars.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6526 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
230398 7.5 危険 woltlab - wBB Lite の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6518 2012-12-20 18:34 2007-12-24 Show GitHub Exploit DB Packet Storm
230399 6.8 警告 ravware - RavWare Software MAS Flic ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6516 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230400 7.5 危険 sitescape - SiteScape Forum の support/dispatch.cgi における任意の TLC コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6515 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200531 8.8 HIGH
Network 		plex media_server Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests. NVD-CWE-noinfo
CVE-2020-5742 2024-11-21 14:34 2020-06-16 Show GitHub Exploit DB Packet Storm
200532 8.1 HIGH
Network 		pivotal_software spring_batch When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deseri… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-5411 2024-11-21 14:34 2020-06-12 Show GitHub Exploit DB Packet Storm
200533 8.8 HIGH
Network 		zenphoto zenphoto Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. CWE-94
Code Injection 		CVE-2020-5593 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
200534 6.1 MEDIUM
Network 		zenphoto zenphoto Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5592 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
200535 6.7 MEDIUM
Local 		dell latitude_5300_firmware
latitude_5300_2-in-1_firmware
latitude_5400_firmware
latitude_5401_firmware
latitude_5500_firmware
latitude_5501_firmware
latitude_7200_2_in_1_firmware
lat… 		Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Ad… NVD-CWE-Other
CVE-2020-5363 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
200536 8.8 HIGH
Adjacent 		sony wf-1000x_firmware
wf-sp700n_firmware
wh-1000xm2_firmware
wh-1000xm3_firmware
wh-ch700n_firmware
wh-h900n_firmware
wh-xb700_firmware
wh-xb900n_firmware
wi-1000x_firmware
wi-… 		SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerabili… CWE-306
Missing Authentication for Critical Function 		CVE-2020-5589 2024-11-21 14:34 2020-06-9 Show GitHub Exploit DB Packet Storm
200537 7.5 HIGH
Network 		xack xack_dns XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the … CWE-674
 Uncontrolled Recursion 		CVE-2020-5591 2024-11-21 14:34 2020-06-6 Show GitHub Exploit DB Packet Storm
200538 7.5 HIGH
Network 		vmware spring_cloud_config Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-co… CWE-22
Path Traversal 		CVE-2020-5410 2024-11-21 14:34 2020-06-3 Show GitHub Exploit DB Packet Storm
200539 4.6 MEDIUM
Physics 		cybozu kintone Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors. CWE-200
Information Exposure 		CVE-2020-5573 2024-11-21 14:34 2020-05-29 Show GitHub Exploit DB Packet Storm
200540 4.6 MEDIUM
Physics 		cybozu mailwise Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. CWE-200
Information Exposure 		CVE-2020-5572 2024-11-21 14:34 2020-05-29 Show GitHub Exploit DB Packet Storm