Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231011 6.8 警告 PHPMailer project - PHPMailer における任意のシェルコマンドを実行される脆弱性 - CVE-2007-3215 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231012 10 危険 PhpWiki - PhpWiki の lib/WikiUser/LDAP.php における認証を回避される脆弱性 - CVE-2007-3193 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
231013 6.8 警告 vincent hor - Calendarix における SQL インジェクションの脆弱性 - CVE-2007-3183 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231014 4.3 警告 vincent hor - Calendarix におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3182 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231015 7.5 危険 zindizayn okul web sistemi - Zindizayn Okul Web Sistemi における SQL インジェクションの脆弱性 - CVE-2007-3178 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231016 7.5 危険 w2b - W2B Online Banking における SQL インジェクションの脆弱性 - CVE-2007-3175 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231017 4.3 警告 w2b - W2B Online Banking の auth.w2b におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3174 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231018 5 警告 uebimiau - Uebimiau Webmail の demo/pop3/error.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3172 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231019 5 警告 uebimiau - Uebimiau Webmail における重要な情報を取得される脆弱性 - CVE-2007-3171 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
231020 4.3 警告 uebimiau - Uebimiau Webmail におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3170 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197791 5.4 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-8542 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197792 6.8 MEDIUM
Network 		huawei p30_firmware
p30_pro_firmware
tony-al00b_firmware 		HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper … CWE-287
Improper Authentication 		CVE-2020-9076 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197793 6.5 MEDIUM
Network 		huawei secospace_usg6300_firmware
secospace_usg6600_firmware
usg6300e_firmware 		Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification… CWE-20
 Improper Input Validation  		CVE-2020-9075 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
197794 6.8 MEDIUM
Physics 		intel innovation_engine_firmware Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of pri… NVD-CWE-noinfo
CVE-2020-8675 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
197795 5.3 MEDIUM
Network 		intel active_management_technology_firmware
service_manager 		Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable informa… CWE-125
Out-of-bounds Read 		CVE-2020-8674 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
197796 5.4 MEDIUM
Network 		openbrowser_project openbrowser OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated] CWE-276
Incorrect Default Permissions  		CVE-2020-8954 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197797 8.8 HIGH
Network 		couchbase couchbase_server In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request. CWE-352
 Origin Validation Error 		CVE-2020-9042 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197798 7.5 HIGH
Network 		couchbase sync_gateway
couchbase_server 		In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack becau… CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-9041 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197799 7.5 HIGH
Network 		couchbase couchbase_server_java_sdk Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically vali… CWE-295
Improper Certificate Validation  		CVE-2020-9040 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
197800 6.3 MEDIUM
Network 		kubernetes
fedoraproject 		kubernetes
fedora 		The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows cert… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8555 2024-11-21 14:39 2020-06-6 Show GitHub Exploit DB Packet Storm