Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230671 7.5 危険 phpecho cms - PHPEcho CMS の modules/admin/modules/gallery.php における SQL インジェクションの脆弱性 - CVE-2007-2866 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
230672 9.3 危険 phpPgAdmin - phpPgAdmin の sqledit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2865 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
230673 7.5 危険 saxon - SAXON における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2861 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230674 7.5 危険 simpgb - SimpGB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2859 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230675 6.5 警告 phpBB - phpBB 用の IP-Tracking Mod における SQL インジェクションの脆弱性 - CVE-2007-2858 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230676 7.5 危険 zakkis technology corporation - ABC Excel Parser の sample/xls2mysql における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2857 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230677 10 危険 sky software - Sky Software Shell MegaPack ActiveX の shComboBox ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2848 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230678 6.8 警告 unicon-imc2 - unicon-imc2 の ImmModules/cce/ におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2835 2012-12-20 18:19 2007-07-1 Show GitHub Exploit DB Packet Storm
230679 9.3 危険 wavelink media - TutorialCMS における認証を回避される脆弱性 - CVE-2007-2822 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
230680 7.5 危険 WordPress.org - WordPress の wp-admin/admin-ajax.php における SQL インジェクションの脆弱性 - CVE-2007-2821 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197991 6.1 MEDIUM
Network 		typo3 typo3 svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/… CWE-79
Cross-site Scripting 		CVE-2020-8091 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197992 4.8 MEDIUM
Network 		a1 wlan_box_adb_vv2220_firmware The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS (after a successful Administrator login). CWE-79
Cross-site Scripting 		CVE-2020-8090 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197993 9.8 CRITICAL
Network 		usebb usebb panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numeric… NVD-CWE-noinfo
CVE-2020-8088 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197994 9.8 CRITICAL
Network 		smc d3g0804w_firmware SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must us… CWE-20
 Improper Input Validation  		CVE-2020-8087 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197995 7.8 HIGH
Local 		valvesoftware dota_2 rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a cra… NVD-CWE-noinfo
CVE-2020-7952 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197996 7.8 HIGH
Local 		valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … CWE-787
 Out-of-bounds Write 		CVE-2020-7951 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197997 7.8 HIGH
Local 		valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … NVD-CWE-noinfo
CVE-2020-7950 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197998 7.8 HIGH
Local 		valvesoftware dota_2 schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafte… NVD-CWE-noinfo
CVE-2020-7949 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
197999 7.5 HIGH
Network 		motu avb_firmware AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file. CWE-22
Path Traversal 		CVE-2020-8009 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198000 5.5 MEDIUM
Local 		virglrenderer_project
debian 		virglrenderer
debian_linux 		A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_… CWE-415
 Double Free 		CVE-2020-8003 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm