Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230951 5.8 警告 phpay - Windows 上で稼動する phPay の main.php におけるディレクトリトラバーサル攻撃を実行される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6471 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230952 6.4 警告 phprpg - phpRPG におけるセッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6470 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230953 9.3 危険 phprpg - phpRPG の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6469 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230954 10 危険 planamesa - Planamesa NeoOffice の OpenOffice.org コードにおける脆弱性 CWE-noinfo
情報不足 		CVE-2007-6456 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
230955 9.3 危険 SAP - Business Objects の RptViewerAX.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6254 2012-12-20 18:34 2008-03-19 Show GitHub Exploit DB Packet Storm
230956 6.8 警告 viart - ViArt CMS などの blocks/block_site_map.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6347 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230957 7.5 危険 Trivantis Corporation Inc. - Trivantis CourseMill Enterprise Learning Management System の userlogin.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6338 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
230958 5 警告 sergey lyubka - Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6326 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230959 5 警告 xml2owl - xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6322 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
230960 4.3 警告 Roundcube.net - RoundCube webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6321 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210071 5.5 MEDIUM
Local 		wisecleaner wise_care_365 There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD). NVD-CWE-noinfo
CVE-2020-23726 2024-11-21 14:14 2020-12-4 Show GitHub Exploit DB Packet Storm
210072 7.8 HIGH
Local 		saibo cyber_game_accelerator In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges CWE-862
 Missing Authorization 		CVE-2020-23735 2024-11-21 14:14 2020-12-4 Show GitHub Exploit DB Packet Storm
210073 7.5 HIGH
Network 		playgroundsessions playground_sessions Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-24227 2024-11-21 14:14 2020-11-24 Show GitHub Exploit DB Packet Storm
210074 8.8 HIGH
Network 		tp-link tl-wpa4220_firmware httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed … CWE-78
OS Command  		CVE-2020-24297 2024-11-21 14:14 2020-11-19 Show GitHub Exploit DB Packet Storm
210075 3.3 LOW
Local 		jetbrains youtrack Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. NVD-CWE-noinfo
CVE-2020-24366 2024-11-21 14:14 2020-11-17 Show GitHub Exploit DB Packet Storm
210076 7.8 HIGH
Local 		intel nuc_8_mainstream-g_kit_nuc8i5inh_firmware
nuc_8_mainstream-g_kit_nuc8i7inh_firmware
nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware
nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware
nuc_8_pro_b… 		Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-24525 2024-11-21 14:14 2020-11-13 Show GitHub Exploit DB Packet Storm
210077 5.5 MEDIUM
Local 		intel driver_\&_support_assistant Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access. CWE-276
Incorrect Default Permissions  		CVE-2020-24460 2024-11-21 14:14 2020-11-13 Show GitHub Exploit DB Packet Storm
210078 7.8 HIGH
Local 		intel board_id_tool Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-276
Incorrect Default Permissions  		CVE-2020-24456 2024-11-21 14:14 2020-11-13 Show GitHub Exploit DB Packet Storm
210079 7.5 HIGH
Network 		intel quartus_prime Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may … CWE-611
XXE 		CVE-2020-24454 2024-11-21 14:14 2020-11-13 Show GitHub Exploit DB Packet Storm
210080 6.1 MEDIUM
Network 		adobe connect Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page,… - CVE-2020-24443 2024-11-21 14:14 2020-11-13 Show GitHub Exploit DB Packet Storm