Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230721 5 警告 pinkcrow designs - PinkCrow Designs Gallery または maGAZIn の phpThumb.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2643 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230722 7.8 危険 r2k - R2K Gallery の galeria.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2642 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230723 7.5 危険 w1l3d4 - W1L3D4 Philboard の W1L3D4_bolum.asp における SQL インジェクションの脆弱性 - CVE-2007-2641 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230724 10 危険 prosysinfo - TFTPdWin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2639 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230725 10 危険 positive software - H-Sphere SiteStudio におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2633 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230726 7.5 危険 SquirrelMail Project - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2631 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230727 6.8 警告 WordPress.org - WordPress の sidebar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2627 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230728 7.5 危険 taskdriver - TaskDriver における SQL インジェクションの脆弱性 - CVE-2007-2622 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230729 4.6 警告 シマンテック - Symantec pcAnywhere における資格情報を取得される脆弱性 - CVE-2007-2619 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230730 2.1 注意 サン・マイクロシステムズ - Sun Solaris の SRS Net Connect Software Proxy Core パッケージにおける任意のファイルの最初の行を読まれる脆弱性 - CVE-2007-2617 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197601 6.5 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows SSRF. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-8544 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197602 7.5 HIGH
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 has Improper Input Validation. CWE-20
 Improper Input Validation 
CVE-2020-8543 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197603 5.4 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows XSS. CWE-79
Cross-site Scripting
CVE-2020-8542 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197604 6.8 MEDIUM
Network
huawei p30_firmware
p30_pro_firmware
tony-al00b_firmware
HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper … CWE-287
Improper Authentication
CVE-2020-9076 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197605 6.5 MEDIUM
Network
huawei secospace_usg6300_firmware
secospace_usg6600_firmware
usg6300e_firmware
Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification… CWE-20
 Improper Input Validation 
CVE-2020-9075 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197606 6.8 MEDIUM
Physics
intel innovation_engine_firmware Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of pri… NVD-CWE-noinfo
CVE-2020-8675 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
197607 5.3 MEDIUM
Network
intel active_management_technology_firmware
service_manager
Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable informa… CWE-125
Out-of-bounds Read
CVE-2020-8674 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
197608 5.4 MEDIUM
Network
openbrowser_project openbrowser OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated] CWE-276
Incorrect Default Permissions 
CVE-2020-8954 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197609 8.8 HIGH
Network
couchbase couchbase_server In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request. CWE-352
 Origin Validation Error
CVE-2020-9042 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197610 7.5 HIGH
Network
couchbase sync_gateway
couchbase_server
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack becau… CWE-404
 Improper Resource Shutdown or Release
CVE-2020-9041 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm