Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230731 7.5 危険 phphtmllib - phpHtmlLib の examples/widget8.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2614 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230732 8.3 危険 Wikka Development Team - WikkaWiki における任意の設定ファイルをアップロードされる脆弱性 - CVE-2007-2613 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230733 7.5 危険 Wikka Development Team - WikkaWiki の libs/Wakka.class.php における SQL インジェクションの脆弱性 - CVE-2007-2612 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230734 6.8 警告 wavelink media - TutorialCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2600 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230735 7.5 危険 wavelink media - TutorialCMS における SQL インジェクションの脆弱性 - CVE-2007-2599 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230736 10 危険 Simplenews Project - SimpleNews の print.php における SQL インジェクションの脆弱性 - CVE-2007-2598 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230737 7.5 危険 telltargetcms - telltarget CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2597 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230738 6.5 警告 rscript - RSAuction におけるユーザ自身のアカウントステータスを Suspended から Active に変更される脆弱性 - CVE-2007-2595 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230739 7.5 危険 phpmyportal - phpMyPortal の inc/articles.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2594 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230740 7.5 危険 vm watermark - Gallery 用の vm watermark における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2575 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199901 7.8 HIGH
Local 		symantec endpoint_protection Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled. NVD-CWE-noinfo
CVE-2020-5836 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
199902 7.0 HIGH
Local 		symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine. CWE-362
Race Condition 		CVE-2020-5835 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
199903 5.3 MEDIUM
Network 		symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory. CWE-22
Path Traversal 		CVE-2020-5834 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
199904 3.3 LOW
Local 		symantec endpoint_protection_manager Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of t… CWE-125
Out-of-bounds Read 		CVE-2020-5833 2024-11-21 14:34 2020-05-12 Show GitHub Exploit DB Packet Storm
199905 7.8 HIGH
Local 		jalinfotec pallet_control Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via… NVD-CWE-noinfo
CVE-2020-5538 2024-11-21 14:34 2020-05-11 Show GitHub Exploit DB Packet Storm
199906 7.2 HIGH
Network 		plex media_server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-5741 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
199907 5.4 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator. CWE-79
Cross-site Scripting 		CVE-2020-5751 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
199908 6.1 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature. CWE-79
Cross-site Scripting 		CVE-2020-5750 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
199909 5.4 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group. CWE-79
Cross-site Scripting 		CVE-2020-5749 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm
199910 6.1 MEDIUM
Network 		tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature. CWE-79
Cross-site Scripting 		CVE-2020-5748 2024-11-21 14:34 2020-05-8 Show GitHub Exploit DB Packet Storm