Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230551 4.3 警告 シックス・アパート株式会社 - MT におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3342 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230552 7.5 危険 phpecho cms - PHPEcho CMS の管理パネルにおける SQL インジェクションの脆弱性 - CVE-2007-3335 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230553 5 警告 PHPNUKE - PHP-Nuke 用の Satel Lite におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3332 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230554 5 警告 stphp - STphp EasyNews におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3331 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230555 4.3 警告 stphp - STphp EasyNews におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3330 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230556 6.8 警告 xvid - Xvid の src/bitstream/mbcoding.c における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2007-3329 2012-12-20 18:19 2007-04-28 Show GitHub Exploit DB Packet Storm
230557 9.3 危険 VideoLAN - VideoLAN VLC Media Player のプラグインにおけるフォーマットストリングの脆弱性 - CVE-2007-3316 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
230558 6.8 警告 yourfreescreamer - YourFreeScreamer における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3315 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230559 7.5 危険 XOOPS - Xoops 用の Articles モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3311 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
230560 4.3 警告 tdizin - TDizin の arama.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3310 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197651 8.8 HIGH
Network 		bestwebsoft htaccess The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the p… CWE-352
 Origin Validation Error 		CVE-2020-8658 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197652 5.9 MEDIUM
Physics 		linux
opensuse
debian 		linux_kernel
leap
debian_linux 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. CWE-416
 Use After Free 		CVE-2020-8649 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197653 7.1 HIGH
Local 		linux
debian
opensuse
netapp
broadcom
canonical 		linux_kernel
debian_linux
leap
cloud_backup
active_iq_unified_manager
solidfire_baseboard_management_controller
brocade_fabric_operating_system_firmware
hci_baseboard_management_… 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. CWE-416
 Use After Free 		CVE-2020-8648 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197654 6.1 MEDIUM
Local 		linux
debian
opensuse 		linux_kernel
debian_linux
leap 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. CWE-416
 Use After Free 		CVE-2020-8647 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197655 8.8 HIGH
Network 		lotus_core_cms_project lotus_core_cms Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter. CWE-22
Path Traversal 		CVE-2020-8641 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197656 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. CWE-521
Weak Password Requirements  		CVE-2020-8632 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
197657 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice funct… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-8631 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
197658 6.5 MEDIUM
Network 		themeum tutor_lms A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legiti… CWE-352
 Origin Validation Error 		CVE-2020-8615 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
197659 9.8 CRITICAL
Network 		point-to-point_protocol_project
wago
debian
canonical 		point-to-point_protocol
pfc_firmware
debian_linux
ubuntu_linux 		eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. CWE-120
Classic Buffer Overflow 		CVE-2020-8597 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm
197660 9.8 CRITICAL
Network 		eginnovations eg_manager eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature). CWE-89
SQL Injection 		CVE-2020-8592 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm