Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230591 8.5 危険 scponly - scponly におけるコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6350 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230592 6.8 警告 SquirrelMail Project - SquirrelMail における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6348 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230593 6.8 警告 prowizard - prowiz におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6510 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230594 7.5 危険 xecms - xeCMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6508 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
230595 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect における "ファイルシステムの全アクセス権限" を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6507 2012-12-20 18:34 2007-07-27 Show GitHub Exploit DB Packet Storm
230596 4.9 警告 plain black - Plain Black WebGUI における管理アカウントを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6487 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230597 6.8 警告 phprpg - phpRPG の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6484 2012-12-20 18:34 2007-12-20 Show GitHub Exploit DB Packet Storm
230598 7.8 危険 サン・マイクロシステムズ - Sun Ray Server Software の utdevmgrd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6482 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
230599 6.4 警告 サン・マイクロシステムズ - Sun Ray Server Software の utdevmgrd における任意のディレクトリを削除される脆弱性 CWE-DesignError
CVE-2007-6481 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
230600 9.4 危険 サン・マイクロシステムズ - Sun MC の Oracle データベースコンポーネントにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2007-6480 2012-12-20 18:34 2007-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200461 9.8 CRITICAL
Network 		vmware
oracle 		spring_integration
flexcube_private_banking
retail_merchandising_system
banking_virtual_account_management
banking_credit_facilities_process_management
banking_corporate_lending_proces… 		Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on d… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-5413 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
200462 8.8 HIGH
Network 		vmware gemfire
tanzu_gemfire_for_virtual_machines 		VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service … CWE-862
 Missing Authorization 		CVE-2020-5396 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
200463 8.4 HIGH
Local 		rsa multifactor_authentication_agent Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerabil… CWE-287
Improper Authentication 		CVE-2020-5384 2024-11-21 14:34 2020-08-1 Show GitHub Exploit DB Packet Storm
200464 7.8 HIGH
Local 		toyota global_techstream Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors. CWE-787
 Out-of-bounds Write 		CVE-2020-5610 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
200465 8.8 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt. CWE-326
Inadequate Encryption Strength 		CVE-2020-5763 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
200466 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a N… CWE-476
 NULL Pointer Dereference 		CVE-2020-5762 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
200467 7.5 HIGH
Network 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by s… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-5761 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
200468 7.8 HIGH
Local 		grandstream ht801_firmware
ht802_firmware
ht812_firmware
ht814_firmware
ht818_firmware
ht813_firmware 		Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by craftin… CWE-78
OS Command  		CVE-2020-5760 2024-11-21 14:34 2020-07-30 Show GitHub Exploit DB Packet Storm
200469 5.3 MEDIUM
Network 		kujirahand konawiki Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2020-5614 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm
200470 6.1 MEDIUM
Network 		kujirahand konawiki Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. CWE-79
Cross-site Scripting 		CVE-2020-5613 2024-11-21 14:34 2020-07-29 Show GitHub Exploit DB Packet Storm