Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230651 5 警告 xt:Commerce - xtcommerce の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1126 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230652 4.3 警告 xeroxer - XeroXer Simple one-file gallery の gallery.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1125 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230653 5 警告 xeroxer - XeroXer Simple one-file gallery の gallery.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1124 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230654 7.5 危険 ZPanel Project - ZPanel における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1123 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230655 6.4 警告 zephyrsoft toolbox - Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 - CVE-2007-1122 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230656 6.4 警告 zephyrsoft toolbox - Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 - CVE-2007-1121 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230657 9.3 危険 steema software - TeeChart Pro ActiveX コントロールにおける .tee ファイルをダウンロードされる脆弱性 - CVE-2007-1120 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230658 4.3 警告 phpwebgallery - Phpwebgallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1109 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230659 4.3 警告 The Tor Project - Tor における超過リソースを不当要求される脆弱性 - CVE-2007-1103 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
230660 7.8 危険 pickle - Ahmet Sacan Pickle の download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1100 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210731 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect against brute force attacks, which may allow u… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-14494 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210732 6.5 MEDIUM
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information. CWE-862
 Missing Authorization 		CVE-2020-14491 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210733 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow exec… CWE-287
Improper Authentication 		CVE-2020-14485 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210734 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-14484 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210735 7.3 HIGH
Local 		oracle solaris Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged … NVD-CWE-noinfo
CVE-2020-14724 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210736 8.2 HIGH
Network 		oracle help_technologies Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerab… NVD-CWE-noinfo
CVE-2020-14723 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210737 5.8 MEDIUM
Network 		oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Difficult to expl… NVD-CWE-noinfo
CVE-2020-14722 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210738 6.3 MEDIUM
Network 		oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Easily exploitabl… NVD-CWE-noinfo
CVE-2020-14721 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210739 7.7 HIGH
Network 		oracle internet_expenses Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitab… NVD-CWE-noinfo
CVE-2020-14720 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210740 9.8 CRITICAL
Network 		moxa edr-g902-t_firmware
edr-g902_firmware
edr-g903-t_firmware
edr-g903_firmware 		Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4). CWE-787
 Out-of-bounds Write 		CVE-2020-14511 2024-11-21 14:03 2020-07-15 Show GitHub Exploit DB Packet Storm