Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231011 4.3 警告 simplegallery - SimpleGallery の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6157 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
231012 6 警告 迅雷 - Xunlei Thunder の pplayer.dll_1_work におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6144 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
231013 7.5 危険 vu - VU Case Manager の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6143 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
231014 4.3 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6142 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
231015 4.3 警告 vbtube - vBTube の vBTube.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6141 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
231016 7.5 危険 vu - VU Mass Mailer の redir.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6138 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
231017 4.3 警告 phpslideshow - PHPSlideShow の phpslideshow.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6135 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
231018 7.5 危険 PHPKIT - PHPKIT の pkinc/public/article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6134 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
231019 2.1 注意 レッドハット - scanbuttond の buttonpressed.sh における任意のファイルを上書きされる脆弱性 CWE-16
環境設定 		CVE-2007-6131 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
231020 7.5 危険 project alumni - project alumni における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6127 2012-12-20 18:33 2007-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213431 5.9 MEDIUM
Network 		red-gate sql_monitor In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifica… CWE-295
Improper Certificate Validation  		CVE-2020-15526 2024-11-21 14:05 2020-07-10 Show GitHub Exploit DB Packet Storm
213432 6.5 MEDIUM
Network 		cmsuno_project cmsuno An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password. CWE-352
 Origin Validation Error 		CVE-2020-15600 2024-11-21 14:05 2020-07-8 Show GitHub Exploit DB Packet Storm
213433 6.1 MEDIUM
Network 		victor_cms_project victor_cms Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field. CWE-79
Cross-site Scripting 		CVE-2020-15599 2024-11-21 14:05 2020-07-8 Show GitHub Exploit DB Packet Storm
213434 9.8 CRITICAL
Network 		riot-os riot RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer estimation function to compute the required buffer capacity and validate against … CWE-119
CWE-131
Incorrect Access of Indexable Resource ('Range Error') 
Incorrect Calculation of Buffer Size 		CVE-2020-15350 2024-11-21 14:05 2020-07-8 Show GitHub Exploit DB Packet Storm
213435 8.8 HIGH
Network 		turn\!_project turn\! The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution. NVD-CWE-noinfo
CVE-2020-15515 2024-11-21 14:05 2020-07-8 Show GitHub Exploit DB Packet Storm
213436 5.5 MEDIUM
Local 		google android An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles … CWE-119
CWE-20
Incorrect Access of Indexable Resource ('Range Error') 
 Improper Input Validation  		CVE-2020-15584 2024-11-21 14:05 2020-07-7 Show GitHub Exploit DB Packet Storm
213437 5.5 MEDIUM
Local 		google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 (J… CWE-22
Path Traversal 		CVE-2020-15583 2024-11-21 14:05 2020-07-7 Show GitHub Exploit DB Packet Storm
213438 5.5 MEDIUM
Local 		google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets) software. The Bluetooth Low Energy (BLE) component has a buffer overflow with a resultant deadlock or … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-15582 2024-11-21 14:05 2020-07-7 Show GitHub Exploit DB Packet Storm
213439 5.3 MEDIUM
Network 		google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared mem… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-15581 2024-11-21 14:05 2020-07-7 Show GitHub Exploit DB Packet Storm
213440 5.5 MEDIUM
Local 		google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) by enrolling a new lock password. The Samsung ID is SV… NVD-CWE-noinfo
CVE-2020-15580 2024-11-21 14:05 2020-07-7 Show GitHub Exploit DB Packet Storm