Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230411 5 警告 WordPress.org - WordPress 用の PictPress プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6369 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230412 4.3 警告 sinecms - SineCMS の guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6367 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230413 7.5 危険 sinecms - SineCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6366 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230414 7.8 危険 サン・マイクロシステムズ - Sun XSCF XCP におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6360 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
230415 8.5 危険 scponly - scponly におけるコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6350 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230416 6.8 警告 SquirrelMail Project - SquirrelMail における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6348 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230417 6.8 警告 prowizard - prowiz におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6510 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230418 7.5 危険 xecms - xeCMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6508 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230419 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect における "ファイルシステムの全アクセス権限" を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6507 2012-12-20 18:34 2007-07-27 Show GitHub Exploit DB Packet Storm
230420 4.9 警告 plain black - Plain Black WebGUI における管理アカウントを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6487 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200581 5.4 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test. CWE-79
Cross-site Scripting 		CVE-2020-5747 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
200582 5.4 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test. CWE-79
Cross-site Scripting 		CVE-2020-5746 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
200583 7.4 HIGH
Network 		tecnick tcexam Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. CWE-352
 Origin Validation Error 		CVE-2020-5745 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
200584 4.9 MEDIUM
Network 		tecnick tcexam Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. CWE-22
Path Traversal 		CVE-2020-5744 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
200585 4.3 MEDIUM
Network 		tecnick tcexam Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-5743 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
200586 7.8 HIGH
Local 		f5 nginx_controller On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the s… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-5895 2024-11-21 14:34 2020-05-7 Show GitHub Exploit DB Packet Storm
200587 8.1 HIGH
Network 		f5 nginx_controller On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out. CWE-384
 Session Fixation 		CVE-2020-5894 2024-11-21 14:34 2020-05-7 Show GitHub Exploit DB Packet Storm
200588 6.5 MEDIUM
Network 		blueonyx 5209r_firmware CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis. CWE-352
 Origin Validation Error 		CVE-2020-5517 2024-11-21 14:34 2020-05-6 Show GitHub Exploit DB Packet Storm
200589 4.6 MEDIUM
Physics 		simplisafe ss3_firmware Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system. CWE-287
Improper Authentication 		CVE-2020-5727 2024-11-21 14:34 2020-05-3 Show GitHub Exploit DB Packet Storm
200590 6.7 MEDIUM
Local 		f5 big-ip_access_policy_manager
big-ip_edge_gateway
big-ip_access_policy_manager_client 		In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory. NVD-CWE-noinfo
CVE-2020-5892 2024-11-21 14:34 2020-05-1 Show GitHub Exploit DB Packet Storm