Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230451 4.3 警告 SAP - SAP IGS の ADM:GETLOGFILE におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3613 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230452 7.5 危険 visual irc - ViRC におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3612 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230453 9.3 危険 vrnews - VRNews の admin.php における特定の管理者操作を実行される脆弱性 - CVE-2007-3611 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230454 7.5 危険 Vastal I-Tech & Co. - phpVID の categories_type.php における SQL インジェクションの脆弱性 - CVE-2007-3610 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230455 5 警告 SAP - EnjoySAP SAP GUI の ActiveX コントロールにおける特定のファイルを作成される脆弱性 - CVE-2007-3608 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230456 5 警告 SAP - EnjoySAP SAP GUI の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3607 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230457 7.6 危険 SAP - EnjoySAP SAP GUI の rfcguisink.rfcguisink.1 ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-3606 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230458 7.6 危険 SAP - EnjoySAP SAP GUI の FrontEnd\SapGui\kwedit.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3605 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
230459 4 警告 Vtiger - vtiger CRM におけるデータ制限を回避される脆弱性 - CVE-2007-3604 2012-12-20 18:33 2007-03-7 Show GitHub Exploit DB Packet Storm
230460 6.5 警告 Vtiger - vtiger CRM の dashboard における SQL インジェクションの脆弱性 - CVE-2007-3603 2012-12-20 18:33 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210331 8.8 HIGH
Network 		veeam veeam_availability_suite
veeam_backup_\&_replication 		VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O req… CWE-862
 Missing Authorization 		CVE-2020-15518 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
210332 2.3 LOW
Local 		qemu
debian 		qemu
debian_linux 		In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2020-15469 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
210333 7.5 HIGH
Network 		libraw
fedoraproject
debian 		libraw
fedora
debian_linux 		LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed… CWE-20
 Improper Input Validation  		CVE-2020-15503 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
210334 7.5 HIGH
Network 		duckduckgo duckduckgo The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which mig… CWE-200
Information Exposure 		CVE-2020-15502 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
210335 6.1 MEDIUM
Network 		tileserver tileservergl An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflect… CWE-79
Cross-site Scripting 		CVE-2020-15500 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
210336 9.8 CRITICAL
Network 		wavlink wl-wn530hg4_firmware An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. (The … CWE-120
Classic Buffer Overflow 		CVE-2020-15490 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
210337 9.8 CRITICAL
Network 		wavlink wl-wn530hg4_firmware An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root pri… CWE-78
OS Command  		CVE-2020-15489 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
210338 7.5 HIGH
Network 		journal-theme journal The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors. CWE-209
Information Exposure Through an Error Message 		CVE-2020-15478 2024-11-21 14:05 2020-07-1 Show GitHub Exploit DB Packet Storm
210339 7.5 HIGH
Network 		ntop
debian 		ndpi
debian_linux 		In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c. CWE-125
Out-of-bounds Read 		CVE-2020-15476 2024-11-21 14:05 2020-07-1 Show GitHub Exploit DB Packet Storm
210340 9.8 CRITICAL
Network 		ntop ndpi In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free. CWE-416
 Use After Free 		CVE-2020-15475 2024-11-21 14:05 2020-07-1 Show GitHub Exploit DB Packet Storm