Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230921 5 警告 SAP - SAP RFC Library の TRUSTED_SYSTEM_SECURITY 関数におけるシステムおよびドメイン上のユーザーとグループの存在を確認される脆弱性 - CVE-2007-1913 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
230922 7.5 危険 ryan haudenschilt - PHP の Ryan Haudenschilt Battle.net Clan Script における SQL インジェクションの脆弱性 - CVE-2007-1909 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
230923 4.3 警告 pineapple technologies - Pineapple Technologies QuizShock の auth.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1905 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
230924 2.6 注意 sonicbb - SonicBB の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1903 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
230925 6.8 警告 sonicbb - SonicBB における SQL インジェクションの脆弱性 - CVE-2007-1902 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
230926 4.3 警告 sonicbb - SonicBB における重要な情報を取得される脆弱性 - CVE-2007-1901 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
230927 6.5 警告 WordPress.org - WordPress の xmlrpc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1897 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
230928 5.8 警告 sky gunning - Sky GUNNING MySpeach の chat.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1896 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
230929 6.8 警告 sky gunning - Sky GUNNING MySpeach の chat.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1895 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
230930 4.3 警告 WordPress.org - WordPress の wp-includes/general-template.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1894 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212741 6.5 MEDIUM
Network
br-automation sitemanager The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances. CWE-552
 Files or Directories Accessible to External Parties
CVE-2020-11642 2024-11-21 13:58 2020-10-16 Show GitHub Exploit DB Packet Storm
212742 6.5 MEDIUM
Network
br-automation sitemanager A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances. CWE-552
 Files or Directories Accessible to External Parties
CVE-2020-11641 2024-11-21 13:58 2020-10-16 Show GitHub Exploit DB Packet Storm
212743 9.8 CRITICAL
Network
zabbix
opensuse
debian
zabbix
leap
backports_sle
debian_linux
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. NVD-CWE-noinfo
CVE-2020-11800 2024-11-21 13:58 2020-10-8 Show GitHub Exploit DB Packet Storm
212744 9.8 CRITICAL
Network
pexip reverse_proxy_and_turn_server
pexip_infinity
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. CWE-20
 Improper Input Validation 
CVE-2020-11805 2024-11-21 13:58 2020-09-25 Show GitHub Exploit DB Packet Storm
212745 9.8 CRITICAL
Network
microfocus operation_bridge_reporter Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affec… CWE-306
Missing Authentication for Critical Function
CVE-2020-11856 2024-11-21 13:58 2020-09-23 Show GitHub Exploit DB Packet Storm
212746 9.8 CRITICAL
Network
microfocus operation_bridge_reporter An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-adm… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11857 2024-11-21 13:58 2020-09-22 Show GitHub Exploit DB Packet Storm
212747 7.8 HIGH
Local
microfocus operation_bridge_reporter An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-11855 2024-11-21 13:58 2020-09-22 Show GitHub Exploit DB Packet Storm
212748 7.8 HIGH
Local
microfocus operations_agent Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local pr… NVD-CWE-noinfo
CVE-2020-11861 2024-11-21 13:58 2020-09-19 Show GitHub Exploit DB Packet Storm
212749 8.8 HIGH
Network
titanhq spamtitan An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur. The input for this parameter is provided… CWE-94
Code Injection
CVE-2020-11804 2024-11-21 13:58 2020-09-18 Show GitHub Exploit DB Packet Storm
212750 8.8 HIGH
Network
titanhq spamtitan An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the… CWE-94
Code Injection
CVE-2020-11803 2024-11-21 13:58 2020-09-18 Show GitHub Exploit DB Packet Storm