Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230641 4.3 警告 web-app.org - WebAPP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1176 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230642 4.3 警告 web-app.org - WebAPP の admin 機能におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1175 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230643 4.3 警告 web-app.org - WebAPP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1174 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230644 5 警告 simbin - SimBin GTR - FIA GT Racing Game などにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1170 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230645 10 危険 watchtower - WT における脆弱性 CWE-noinfo
情報不足 		CVE-2007-1134 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230646 7.5 危険 scripter.ch - FCRing の fcring.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1133 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230647 7.5 危険 scripter.ch - Sinapis Forum の sinapis.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1131 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230648 7.5 危険 scipter.ch - Sinapis Gastebuch の sinagb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1130 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230649 5 警告 watersweb shops - shopkitplus における重要な情報を取得される脆弱性 - CVE-2007-1128 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230650 6.4 警告 watersweb shops - shopkitplus の enc/stylecss.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1127 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210671 8.8 HIGH
Network 		moodle moodle In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course. CWE-863
 Incorrect Authorization 		CVE-2020-14321 2024-11-21 14:03 2022-08-17 Show GitHub Exploit DB Packet Storm
210672 6.1 MEDIUM
Network 		moodle moodle In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk. CWE-79
Cross-site Scripting 		CVE-2020-14320 2024-11-21 14:03 2022-08-17 Show GitHub Exploit DB Packet Storm
210673 9.8 CRITICAL
Network 		mitsubishielectric m_commdtm-hart
gx_works3
gx_works2
gx_logviewer
gt_softgot2000
gt_softgot1000
gt_designer3
fr_configurator2
ezsocket
data_transfer
cw_configurator
cpu_module_logging_… 		Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and e… NVD-CWE-noinfo
CVE-2020-14496 2024-11-21 14:03 2022-05-20 Show GitHub Exploit DB Packet Storm
210674 5.3 MEDIUM
Network 		inductiveautomation ignition Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server CWE-306
Missing Authentication for Critical Function 		CVE-2020-14479 2024-11-21 14:03 2022-04-2 Show GitHub Exploit DB Packet Storm
210675 5.3 MEDIUM
Network 		rockwellautomation 1734-aentr_point_i\/o_dual_port_network_adaptor_series_b_firmware
1734-aentr_point_i\/o_dual_port_network_adaptor_series_c_firmware 		The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modificatio… CWE-287
Improper Authentication 		CVE-2020-14504 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210676 6.1 MEDIUM
Network 		rockwellautomation 1734-aentr_point_i\/o_dual_port_network_adaptor_series_b_firmware
1734-aentr_point_i\/o_dual_port_network_adaptor_series_c_firmware 		The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, c… CWE-79
Cross-site Scripting 		CVE-2020-14502 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210677 7.8 HIGH
Local 		rockwellautomation factorytalk_view The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows… CWE-326
Inadequate Encryption Strength 		CVE-2020-14481 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210678 5.5 MEDIUM
Local 		rockwellautomation factorytalk_view Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-14480 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210679 7.1 HIGH
Local 		rockwellautomation factorytalk_services_platform A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a … CWE-611
XXE 		CVE-2020-14478 2024-11-21 14:03 2022-02-25 Show GitHub Exploit DB Packet Storm
210680 9.8 CRITICAL
Network 		mitsubishielectric cw_configurator
mi_configurator
gx_works3
gx_works2
melsoft_iq_appportal
melsoft_navigator
mr_configurator2
mt_works2
mx_component
rt_toolbox3
fr_configurator2
iu_dev… 		Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code. CWE-22
Path Traversal 		CVE-2020-14523 2024-11-21 14:03 2022-02-12 Show GitHub Exploit DB Packet Storm