Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230871	4.3	警告	シマンテック	-	Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における総当たり攻撃を実行される脆弱性	-	CVE-2007-3022	2012-12-20 18:19	2007-06-5	Show	GitHub Exploit DB Packet Storm

230872	7.5	危険	シマンテック	-	Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における任意の実行可能なファイルを作成される脆弱性	-	CVE-2007-3021	2012-12-20 18:19	2007-06-5	Show	GitHub Exploit DB Packet Storm

230873	9.3	危険	zenturi	-	Zenturi ProgramChecker の sasatl.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2987	2012-12-20 18:19	2007-06-1	Show	GitHub Exploit DB Packet Storm

230874	7.8	危険	techno dreams	-	Techno Dreams Web Directory / Search Engine におけるデータベースをダウンロードされる脆弱性	-	CVE-2007-2979	2012-12-20 18:19	2007-05-31	Show	GitHub Exploit DB Packet Storm

230875	7.5	危険	Wanewsletter	-	WAnewsletter の newsletter.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2969	2012-12-20 18:19	2007-05-31	Show	GitHub Exploit DB Packet Storm

230876	7.5	危険	scallywag.org	-	Scallywag におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2960	2012-12-20 18:19	2007-05-31	Show	GitHub Exploit DB Packet Storm

230877	6.8	警告	sylpheed-claws Sylpheed	-	Sylpheed および Sylpheed-Claws の src/inc.c におけるフォーマットストリングの脆弱性	-	CVE-2007-2958	2012-12-20 18:19	2007-08-27	Show	GitHub Exploit DB Packet Storm

230878	6.8	警告	シマンテック	-	Norton AntiVirus などの製品で使用される NavComUI.dll における任意のコードを実行される脆弱性	-	CVE-2007-2955	2012-12-20 18:19	2007-08-9	Show	GitHub Exploit DB Packet Storm

230879	5	警告	rmforum	-	RMForum におけるデータベースをダウンロードされる脆弱性	-	CVE-2007-2945	2012-12-20 18:19	2007-05-30	Show	GitHub Exploit DB Packet Storm

230880	5	警告	wabcms	-	WabCMS におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-2944	2012-12-20 18:19	2007-05-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197921	6.7	MEDIUM Local	lenovo	notebook_firmware	A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution.	NVD-CWE-noinfo	CVE-2020-8354	2024-11-21 14:38	2020-11-12	Show	GitHub Exploit DB Packet Storm

197922	6.7	MEDIUM Local	lenovo	thinkcentre_m80t_firmware thinkcentre_m80s_firmware thinkcentre_m90t_firmware thinkcentre_m90s_firmware thinkcentre_m910z_firmware thinkcentre_m920s_firmware thinkcentre_m920t_firmw…	Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative u…	NVD-CWE-noinfo	CVE-2020-8353	2024-11-21 14:38	2020-11-12	Show	GitHub Exploit DB Packet Storm

197923	2.4	LOW Physics	lenovo	thinkcentre_e73_firmware thinkcentre_m73_firmware qitian_4500_firmware qitian_b4550_firmware qitian_m4550_firmware thinkcentre_m4500k_firmware thinkcentre_m4500t_firmware thinkce…	In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.	NVD-CWE-noinfo	CVE-2020-8352	2024-11-21 14:38	2020-11-12	Show	GitHub Exploit DB Packet Storm

197924	7.5	HIGH Network	json8-merge-patch_project	json8-merge-patch	Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.	CWE-20 Improper Input Validation	CVE-2020-8268	2024-11-21 14:38	2020-11-10	Show	GitHub Exploit DB Packet Storm

197925	4.1	MEDIUM Local	nextcloud	nextcloud_server	A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.	CWE-311 Missing Encryption of Sensitive Data	CVE-2020-8150	2024-11-21 14:38	2020-11-10	Show	GitHub Exploit DB Packet Storm

197926	5.3	MEDIUM Network	nextcloud	nextcloud_server	A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-8133	2024-11-21 14:38	2020-11-10	Show	GitHub Exploit DB Packet Storm

197927	5.5	MEDIUM Local	brave	brave	The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. T…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-8276	2024-11-21 14:38	2020-11-10	Show	GitHub Exploit DB Packet Storm

197928	5.3	MEDIUM Network	ui	unifi_protect_firmware	A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to…	CWE-287 Improper Authentication	CVE-2020-8267	2024-11-21 14:38	2020-11-6	Show	GitHub Exploit DB Packet Storm

197929	7.5	HIGH Network	tcpdump debian fedoraproject apple	tcpdump debian_linux fedora mac_os_x macos	The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8037	2024-11-21 14:38	2020-11-5	Show	GitHub Exploit DB Packet Storm

197930	7.5	HIGH Network	tcpdump	tcpdump	The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.	CWE-125 Out-of-bounds Read	CVE-2020-8036	2024-11-21 14:38	2020-11-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed