Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231031 4.3 警告 WordPress.org - WordPress の WordPress Classic テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4483 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
231032 4.3 警告 WordPress.org - WordPress 用の Pool テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4482 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
231033 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4481 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231034 4.3 警告 WordPress.org - WordPress 用の Sirius テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4480 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
231035 5 警告 planet technology corp - Planet VC-200M VDSL2 ルータの管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4477 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
231036 3.3 注意 po4a - po4a の lib/Locale/Po4a/Po.pm における任意のファイルを上書きされる脆弱性 - CVE-2007-4462 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231037 5 警告 toribash - Toribash のサーバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4452 2012-12-20 18:33 2007-08-20 Show GitHub Exploit DB Packet Storm
231038 5 警告 toribash - Windows 上で稼動している Toribash のサーバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4451 2012-12-20 18:33 2007-08-20 Show GitHub Exploit DB Packet Storm
231039 5 警告 toribash - Toribash のサーバにおけるプロトコル違反を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4450 2012-12-20 18:33 2007-08-20 Show GitHub Exploit DB Packet Storm
231040 5 警告 toribash - Toribash のクライアントにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4449 2012-12-20 18:33 2007-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212611 7.8 HIGH
Local 		amd radeon_pro_software
radeon_software 		An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, whic… CWE-787
 Out-of-bounds Write 		CVE-2020-12981 2024-11-21 14:00 2021-06-12 Show GitHub Exploit DB Packet Storm
212612 7.8 HIGH
Local 		amd radeon_pro_software
radeon_software 		An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service. CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-12980 2024-11-21 14:00 2021-06-12 Show GitHub Exploit DB Packet Storm
212613 7.2 HIGH
Network 		amd epyc_7251
epyc_7261
epyc_7281
epyc_7301
epyc_7351
epyc_7351p
epyc_7371
epyc_7401
epyc_7401p
epyc_7451
epyc_7501
epyc_7551
epyc_7551p
epyc_7601
epyc_7763
e… 		The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the… CWE-77
Command Injection 		CVE-2020-12967 2024-11-21 14:00 2021-05-13 Show GitHub Exploit DB Packet Storm
212614 4.6 MEDIUM
Physics 		coolkit ewelink Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eaves… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-12702 2024-11-21 14:00 2021-02-24 Show GitHub Exploit DB Packet Storm
212615 8.8 HIGH
Network 		atlassian alfresco_enterprise_content_management An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run a… CWE-74
Injection 		CVE-2020-12873 2024-11-21 14:00 2021-02-20 Show GitHub Exploit DB Packet Storm
212616 6.5 MEDIUM
Network 		hubspot jinjava Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrar… CWE-863
 Incorrect Authorization 		CVE-2020-12668 2024-11-21 14:00 2021-02-20 Show GitHub Exploit DB Packet Storm
212617 7.8 HIGH
Local 		digi connectport_x2e_firmware Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/py… CWE-59
Link Following 		CVE-2020-12878 2024-11-21 14:00 2021-02-18 Show GitHub Exploit DB Packet Storm
212618 6.5 MEDIUM
Network 		teradici cloud_access_connector An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID… CWE-352
 Origin Validation Error 		CVE-2020-13186 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
212619 6.5 MEDIUM
Network 		teradici cloud_access_connector Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an atta… CWE-287
Improper Authentication 		CVE-2020-13185 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
212620 9.8 CRITICAL
Network 		wavlink wn575a4_firmware
wn579x3_firmware 		Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request. CWE-77
Command Injection 		CVE-2020-13117 2024-11-21 14:00 2021-02-10 Show GitHub Exploit DB Packet Storm