Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230521	5	警告	skadate	-	SkaDate におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5299	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230522	4.3	警告	wikepage	-	Wikepage Opus および TipiWiki の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 CWE-94	CVE-2007-5295	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230523	6.8	警告	sitesys	-	SiteSys における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5166	2012-12-20 18:33	2007-10-1	Show	GitHub Exploit DB Packet Storm

230524	6.8	警告	Restaurant Management System project	-	Thierry Leriche ReMaSys における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5160	2012-12-20 18:33	2007-10-1	Show	GitHub Exploit DB Packet Storm

230525	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Access Manager における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5153	2012-12-20 18:33	2007-09-27	Show	GitHub Exploit DB Packet Storm

230526	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Access Manager における管理者タスクを実行される脆弱性	CWE-287 不適切な認証	CVE-2007-5152	2012-12-20 18:33	2007-09-27	Show	GitHub Exploit DB Packet Storm

230527	6.8	警告	puzzle apps cms	-	Puzzle Apps CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5147	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

230528	4.3	警告	solidweb	-	Solidweb Novus の buscar.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5142	2012-12-20 18:33	2007-09-28	Show	GitHub Exploit DB Packet Storm

230529	6.8	警告	sitex	-	SiteX CMS の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5141	2012-12-20 18:33	2007-09-28	Show	GitHub Exploit DB Packet Storm

230530	4.3	警告	simpgb	-	SimpGB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5127	2012-12-20 18:33	2007-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213701	7.5	HIGH Network	redhat	single_sign-on openshift_application_runtimes keycloak	A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value tha…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-10758	2024-11-21 13:56	2020-09-17	Show	GitHub Exploit DB Packet Storm

213702	5.5	MEDIUM Local	linux debian	linux_kernel debian_linux	A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM devic…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-10781	2024-11-21 13:56	2020-09-16	Show	GitHub Exploit DB Packet Storm

213703	5.5	MEDIUM Local	linux	linux_kernel	A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as…	NVD-CWE-noinfo	CVE-2020-10768	2024-11-21 13:56	2020-09-16	Show	GitHub Exploit DB Packet Storm

213704	5.5	MEDIUM Local	linux	linux_kernel	A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available o…	NVD-CWE-noinfo	CVE-2020-10767	2024-11-21 13:56	2020-09-16	Show	GitHub Exploit DB Packet Storm

213705	5.5	MEDIUM Local	linux	linux_kernel	A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a contex…	NVD-CWE-noinfo	CVE-2020-10766	2024-11-21 13:56	2020-09-16	Show	GitHub Exploit DB Packet Storm

213706	6.0	MEDIUM Local	redhat	enterprise_linux	A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practi…	-	CVE-2020-10759	2024-11-21 13:56	2020-09-16	Show	GitHub Exploit DB Packet Storm

213707	4.4	MEDIUM Local	linux	linux_kernel	A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local us…	NVD-CWE-Other	CVE-2020-10773	2024-11-21 13:56	2020-09-11	Show	GitHub Exploit DB Packet Storm

213708	7.8	HIGH Local	qualcomm	bitra_firmware kamorta_firmware qcs605_firmware saipan_firmware sdm710_firmware sm8250_firmware sxr2130_firmware	u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in …	CWE-416 Use After Free	CVE-2020-11129	2024-11-21 13:56	2020-09-9	Show	GitHub Exploit DB Packet Storm

213709	7.5	HIGH Network	qualcomm	apq8098_firmware kamorta_firmware msm8917_firmware msm8953_firmware nicobar_firmware qcm2150_firmware qcs605_firmware qm215_firmware rennell_firmware sa6155p_firmware sa…	u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917,…	CWE-617 Reachable Assertion	CVE-2020-11135	2024-11-21 13:56	2020-09-9	Show	GitHub Exploit DB Packet Storm

213710	7.8	HIGH Local	qualcomm	mdm9607_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs610_firmware rennell_firmware sa6155p_firmware sa8155p_firmware saipan_firmware sc8180x_firmware sdm…	u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap…	CWE-416 Use After Free	CVE-2020-11124	2024-11-21 13:56	2020-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed