Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230891	7.5	危険	racer	-	Racer の client などにおけるバッファオーバーフローの脆弱性	-	CVE-2007-4370	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230892	5	警告	sote	-	SOTEeSKLEP の go/_files におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4369	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230893	5	警告	wengo	-	WengoPhone におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4366	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230894	6.8	警告	prozilla	-	Prozilla Webring の category.php における SQL インジェクションの脆弱性	-	CVE-2007-4362	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230895	6.8	警告	skilmatch staffing systems	-	SkilMatch Staffing Systems JobLister3 における SQL インジェクションの脆弱性	-	CVE-2007-4359	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230896	4.3	警告	zoidcom	-	Zoidcom におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4358	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230897	7.5	危険	phpcentral	-	PHPCentral Login の include.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4342	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230898	7.5	危険	phpdvd	-	phpDVD の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-4340	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230899	7.5	危険	phpcentral	-	PHPCentral Poll Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4339	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230900	5.8	警告	streamripper	-	Streamripper の lib/http.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4337	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198381	8.8	HIGH Network	citrix	xendesktop xenapp virtual_apps_and_desktops	An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX2861…	CWE-269 Improper Privilege Management	CVE-2020-8283	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198382	8.8	HIGH Network	ui	edgemax_edgepower_24v_firmware edgemax_edgepower_54v_firmware	A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution.	CWE-352 Origin Validation Error	CVE-2020-8282	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198383	7.5	HIGH Network	citrix	gateway_plug-in	Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files.	CWE-269 Improper Privilege Management	CVE-2020-8258	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198384	9.8	CRITICAL Network	citrix	gateway_plug-in	Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks	CWE-269 Improper Privilege Management	CVE-2020-8257	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198385	7.5	HIGH Network	haxx siemens debian oracle splunk	libcurl sinec_infrastructure_network_services debian_linux communications_cloud_native_core_policy universal_forwarder	Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.	CWE-416 Use After Free	CVE-2020-8231	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198386	7.8	HIGH Local	haxx debian fujitsu siemens splunk	curl debian_linux m10-1_firmware m10-4_firmware m10-4s_firmware m12-1_firmware m12-2_firmware m12-2s_firmware sinec_infrastructure_network_services universal_forwarder	curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.	CWE-74 Injection	CVE-2020-8177	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198387	7.5	HIGH Network	haxx siemens debian splunk	curl simatic_tim_1531_irc_firmware debian_linux sinec_infrastructure_network_services universal_forwarder	curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).	CWE-200 Information Exposure	CVE-2020-8169	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

198388	7.8	HIGH Local	kia	head_unit_firmware	Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon…	CWE-276 Incorrect Default Permissions	CVE-2020-8539	2024-11-21 14:38	2020-12-2	Show	GitHub Exploit DB Packet Storm

198389	7.8	HIGH Local	lenovo	pcmanager	A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges.	CWE-269 Improper Privilege Management	CVE-2020-8351	2024-11-21 14:38	2020-12-1	Show	GitHub Exploit DB Packet Storm

198390	6.5	MEDIUM Network	mongodb	ops_manager	Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 version…	NVD-CWE-noinfo	CVE-2020-7927	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed