Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231161	8.5	危険	php-stats	-	Php-Stats における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5453	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231162	10	危険	php-stats	-	Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5452	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231163	7.5	危険	softbiz	-	Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5449	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231164	1.9	注意	VMware	-	VMware Workstation などの Reconfig.DLL における vmount2.exe がサービス運用妨害 (DoS) 状態となる脆弱性	CWE-20 不適切な入力確認	CVE-2007-5438	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231165	4.3	警告	pro.setun	-	PRO-search におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5434	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231166	4.3	警告	siteup	-	Site-Up の index.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5433	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231167	7.5	危険	scottmanktelow	-	Stride における管理者権限を取得される脆脆弱性	CWE-200 情報漏えい	CVE-2007-5432	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231168	7.5	危険	scottmanktelow	-	Stride における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5430	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231169	4.3	警告	Umisoft	-	UMI CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5428	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231170	7.5	危険	Tiki Software Community Association	-	TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5423	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200201	7.2	HIGH Network	gpononu	1ge_router_wifi_onu_v2801rw_firmware 1ge\+3fe\+wifi_onu_v2804rgw_firmware	Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in …	CWE-78 OS Command	CVE-2020-8958	2024-11-21 14:39	2020-07-16	Show	GitHub Exploit DB Packet Storm

200202	5.5	MEDIUM Local	openthread	wpantund	A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: d…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-8916	2024-11-21 14:39	2020-07-8	Show	GitHub Exploit DB Packet Storm

200203	7.5	HIGH Network	envoyproxy	envoy	Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8663	2024-11-21 14:39	2020-07-2	Show	GitHub Exploit DB Packet Storm

200204	6.5	MEDIUM Network	netapp	hci_h610s_firmware	The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed during the initial node setup. During up…	CWE-798 Use of Hard-coded Credentials	CVE-2020-8573	2024-11-21 14:39	2020-06-29	Show	GitHub Exploit DB Packet Storm

200205	7.2	HIGH Network	johnsoncontrols	exacqvision_web_service exacqvision_enterprise_manager	A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterpr…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-9047	2024-11-21 14:39	2020-06-27	Show	GitHub Exploit DB Packet Storm

200206	7.8	HIGH Local	google opensuse	guest-oslogin leap	A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Usi…	CWE-276 Incorrect Default Permissions	CVE-2020-8933	2024-11-21 14:39	2020-06-22	Show	GitHub Exploit DB Packet Storm

200207	7.8	HIGH Local	google opensuse	guest-oslogin leap	A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Usi…	CWE-276 Incorrect Default Permissions	CVE-2020-8907	2024-11-21 14:39	2020-06-22	Show	GitHub Exploit DB Packet Storm

200208	7.8	HIGH Local	google opensuse	guest-oslogin leap	A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Usi…	CWE-276 Incorrect Default Permissions	CVE-2020-8903	2024-11-21 14:39	2020-06-22	Show	GitHub Exploit DB Packet Storm

200209	4.9	MEDIUM Network	isc opensuse netapp canonical	bind leap steelstore_cloud_integrated_storage ubuntu_linux	An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clie…	CWE-617 Reachable Assertion	CVE-2020-8618	2024-11-21 14:39	2020-06-18	Show	GitHub Exploit DB Packet Storm

200210	4.9	MEDIUM Network	isc fedoraproject opensuse debian canonical netapp	bind fedora leap debian_linux ubuntu_linux steelstore_cloud_integrated_storage	In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative s…	CWE-404 Improper Resource Shutdown or Release	CVE-2020-8619	2024-11-21 14:39	2020-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed