Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231081 5 警告 ssl-explorer - SSL-Explorer の fileSystem.do におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5831 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231082 6 警告 シマンテック - Macintosh 用の Symantec AntiVirus などの製品の Disk Mount スキャナにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5829 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
231083 7.5 危険 scribe - Ben Ng Scribe の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5823 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231084 7.5 危険 scribe - Ben Ng Scribe の forum.php における regged/ 配下の特定のファイルへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2007-5822 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231085 7.6 危険 sblog - sBlog の blocks_edit_do.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5818 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231086 10 危険 SonicWALL - SonicWall SSL-VPN 200 および SSL-VPN 2000/4000 の WebCacheCleaner ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5815 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231087 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5814 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231088 6.8 警告 ssreader - SSReader の Ultra Star Reader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5807 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231089 7.5 危険 work system e-commerce - WORK system e-commerce における脆弱性 CWE-noinfo
情報不足
CVE-2007-5801 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
231090 6.8 警告 tom willmot - WordPress 用の BackUpWordPress プラグインにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5800 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213441 8.1 HIGH
Network
liferay liferay_portal
dxp
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serial… CWE-502
 Deserialization of Untrusted Data
CVE-2020-15842 2024-11-21 14:06 2020-07-20 Show GitHub Exploit DB Packet Storm
213442 8.8 HIGH
Network
liferay liferay_portal
dxp
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attacke… NVD-CWE-noinfo
CVE-2020-15841 2024-11-21 14:06 2020-07-20 Show GitHub Exploit DB Packet Storm
213443 8.8 HIGH
Network
westerndigital wd_discovery In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection … CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-15816 2024-11-21 14:06 2020-07-18 Show GitHub Exploit DB Packet Storm
213444 6.5 MEDIUM
Network
gnu libredwg GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. CWE-476
 NULL Pointer Dereference
CVE-2020-15807 2024-11-21 14:06 2020-07-18 Show GitHub Exploit DB Packet Storm
213445 8.1 HIGH
Network
graylog graylog Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configuration allows the usage of unencrypted, … CWE-295
Improper Certificate Validation 
CVE-2020-15813 2024-11-21 14:06 2020-07-18 Show GitHub Exploit DB Packet Storm
213446 6.1 MEDIUM
Network
zabbix
fedoraproject
debian
opensuse
zabbix
fedora
debian_linux
leap
backports
Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget. CWE-79
Cross-site Scripting
CVE-2020-15803 2024-11-21 14:06 2020-07-17 Show GitHub Exploit DB Packet Storm
213447 9.8 CRITICAL
Network
python
netapp
python
max_data
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file)… CWE-426
 Untrusted Search Path
CVE-2020-15801 2024-11-21 14:06 2020-07-17 Show GitHub Exploit DB Packet Storm
213448 6.7 MEDIUM
Local
linux
opensuse
canonical
linux_kernel
leap
ubuntu_linux
An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot… CWE-862
 Missing Authorization
CVE-2020-15780 2024-11-21 14:06 2020-07-16 Show GitHub Exploit DB Packet Storm
213449 7.5 HIGH
Network
socket.io-file_project socket.io-file A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir an… CWE-22
Path Traversal
CVE-2020-15779 2024-11-21 14:06 2020-07-16 Show GitHub Exploit DB Packet Storm
213450 6.1 MEDIUM
Network
rosariosis rosariosis RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inac… CWE-79
Cross-site Scripting
CVE-2020-15718 2024-11-21 14:06 2020-07-16 Show GitHub Exploit DB Packet Storm