Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230671 6.8 警告 ultimate fun book - Ultimate Fun Book の function.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1059 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230672 7.2 危険 VMware - VMware Workstation における制限された操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-1056 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230673 4.3 警告 WordPress.org - WordPress 用の nonce AYS 機能におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1049 2012-12-20 18:19 2007-02-13 Show GitHub Exploit DB Packet Storm
230674 7.5 危険 phpbb wordsearch - phpbb_wordsearch の admin_rebuild_search.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1048 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230675 5.8 警告 xpression news - X-News の news.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1042 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230676 9.3 危険 sandh - S&H Computer Systems News Rover におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-1041 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230677 7.5 危険 xpression news - X-News の archives.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1040 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230678 5 警告 shemes.com - Shemes.com Grabit におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1038 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230679 9.3 危険 rsbr-software - News File Grabber におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-1037 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230680 7.5 危険 PHPNUKE - PHP-Nuke 用の Emporium モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1034 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210731 9.8 CRITICAL
Network
openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect against brute force attacks, which may allow u… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-14494 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210732 6.5 MEDIUM
Network
openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information. CWE-862
 Missing Authorization
CVE-2020-14491 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210733 9.8 CRITICAL
Network
openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow exec… CWE-287
Improper Authentication
CVE-2020-14485 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210734 9.8 CRITICAL
Network
openclinic_ga_project openclinic_ga OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-14484 2024-11-21 14:03 2020-07-21 Show GitHub Exploit DB Packet Storm
210735 7.3 HIGH
Local
oracle solaris Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged … NVD-CWE-noinfo
CVE-2020-14724 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210736 8.2 HIGH
Network
oracle help_technologies Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerab… NVD-CWE-noinfo
CVE-2020-14723 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210737 5.8 MEDIUM
Network
oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Difficult to expl… NVD-CWE-noinfo
CVE-2020-14722 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210738 6.3 MEDIUM
Network
oracle enterprise_communications_broker Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Easily exploitabl… NVD-CWE-noinfo
CVE-2020-14721 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210739 7.7 HIGH
Network
oracle internet_expenses Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitab… NVD-CWE-noinfo
CVE-2020-14720 2024-11-21 14:03 2020-07-16 Show GitHub Exploit DB Packet Storm
210740 9.8 CRITICAL
Network
moxa edr-g902-t_firmware
edr-g902_firmware
edr-g903-t_firmware
edr-g903_firmware
Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4). CWE-787
 Out-of-bounds Write
CVE-2020-14511 2024-11-21 14:03 2020-07-15 Show GitHub Exploit DB Packet Storm