Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230761 2.1 注意 XWiki - XWiki Enterprise の Multiwiki プラグインにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2007-4898 2012-12-20 18:33 2007-09-14 Show GitHub Exploit DB Packet Storm
230762 4.3 警告 toms-seiten.at - Toms Gaestebuch の admin/header.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4896 2012-12-20 18:33 2007-09-14 Show GitHub Exploit DB Packet Storm
230763 5 警告 sisfo kampus - Semarang 3 の dwoprn.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4895 2012-12-20 18:33 2007-09-14 Show GitHub Exploit DB Packet Storm
230764 7.5 危険 WordPress.org - Wordpress および MU における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4894 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
230765 4.3 警告 WordPress.org - Wordpress および MU の wp-admin/admin-functions.php におけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-4893 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
230766 7.5 危険 swsoft - Windows 用の SWSoft Plesk における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4892 2012-12-20 18:33 2007-09-14 Show GitHub Exploit DB Packet Storm
230767 3.5 注意 XWiki - XWiki の "You are not allowed ..." のエラーハンドラにおける任意のドキュメントを読み取られる脆弱性 CWE-DesignError
CVE-2007-4888 2012-12-20 18:33 2007-01-11 Show GitHub Exploit DB Packet Storm
230768 4.3 警告 techexcel inc. - TechExcel CustomerWise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4882 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
230769 7.5 危険 psi-labs - psisns の profile/myprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4881 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
230770 5 警告 Simplenews Project - SimpNews における任意の .inc ファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4873 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197451 8.8 HIGH
Network
apple mac_os_x
icloud
itunes
iphone_os
watchos
tvos
ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windo… CWE-787
 Out-of-bounds Write
CVE-2020-9790 2024-11-21 14:41 2020-06-10 Show GitHub Exploit DB Packet Storm
197452 8.8 HIGH
Network
apple mac_os_x
icloud
itunes
iphone_os
watchos
tvos
ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windo… CWE-787
 Out-of-bounds Write
CVE-2020-9789 2024-11-21 14:41 2020-06-10 Show GitHub Exploit DB Packet Storm
197453 7.8 HIGH
Local
apple mac_os_x A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.5. A file may be incorrectly rendered to execute JavaScript. CWE-20
 Improper Input Validation 
CVE-2020-9788 2024-11-21 14:41 2020-06-10 Show GitHub Exploit DB Packet Storm
197454 4.6 MEDIUM
Physics
apple mac_os_x
iphone_os
ipados
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A USB device may be able to cause a denial of service. CWE-20
 Improper Input Validation 
CVE-2020-9792 2024-11-21 14:41 2020-06-10 Show GitHub Exploit DB Packet Storm
197455 9.1 CRITICAL
Network
naver whale_browser_installer Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-9753 2024-11-21 14:41 2020-05-20 Show GitHub Exploit DB Packet Storm
197456 7.5 HIGH
Network
apple nioextras In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions. NVD-CWE-Other
CVE-2020-9840 2024-11-21 14:41 2020-05-12 Show GitHub Exploit DB Packet Storm
197457 7.8 HIGH
Local
apple mac_os_x
ipados
iphone_os
tvos
watchos
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious applicati… CWE-787
 Out-of-bounds Write
CVE-2020-9785 2024-11-21 14:41 2020-04-2 Show GitHub Exploit DB Packet Storm
197458 4.3 MEDIUM
Network
apple safari A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings. NVD-CWE-Other
CVE-2020-9784 2024-11-21 14:41 2020-04-2 Show GitHub Exploit DB Packet Storm
197459 8.8 HIGH
Network
apple icloud
itunes
ipados
iphone_os
tvos
safari
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, i… CWE-416
 Use After Free
CVE-2020-9783 2024-11-21 14:41 2020-04-2 Show GitHub Exploit DB Packet Storm
197460 5.3 MEDIUM
Network
apple ipados
iphone_os
The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to. CWE-281
 Improper Preservation of Permissions
CVE-2020-9781 2024-11-21 14:41 2020-04-2 Show GitHub Exploit DB Packet Storm