Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231181 6.8 警告 xkiosk - xKiosk WEB の system/funcs/xkurl.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5314 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231182 7.5 危険 script-solution.de - Picturesolution の install/config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5313 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231183 4.3 警告 torrenttrader - TorrentTrader Classic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5312 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231184 7.5 危険 torrenttrader - TorrentTrader Classic Edition の backend/admin-functions.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5311 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231185 7.5 危険 yannick tanguy - ELSEIF CMS における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5307 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231186 5 警告 yannick tanguy - ELSEIF CMS における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5306 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231187 7.5 危険 yannick tanguy - ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5305 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231188 4.3 警告 yannick tanguy - ELSEIF CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5304 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231189 4.3 警告 snewscms - SnewsCMS Rus の news_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5303 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
231190 4.3 警告 splitside - Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5292 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212261 7.8 HIGH
Local 		microsoft windows_server_2008
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2012
windows_server_2019 		<p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could exe… NVD-CWE-noinfo
CVE-2020-16887 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212262 6.1 MEDIUM
Network 		olimpoks olimpok OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applica… CWE-79
Cross-site Scripting 		CVE-2020-16270 2024-11-21 14:07 2020-10-16 Show GitHub Exploit DB Packet Storm
212263 5.3 MEDIUM
Local 		microsoft powershellget <p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) po… NVD-CWE-noinfo
CVE-2020-16886 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212264 7.8 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		<p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated… NVD-CWE-noinfo
CVE-2020-16885 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212265 7.1 HIGH
Local 		microsoft windows_server_2016
windows_10 		<p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targe… NVD-CWE-noinfo
CVE-2020-16877 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212266 7.1 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		<p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnera… NVD-CWE-noinfo
CVE-2020-16876 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212267 7.5 HIGH
Network 		microsoft windows_server_2008
windows_7 		<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successful… NVD-CWE-noinfo
CVE-2020-16863 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
212268 8.8 HIGH
Network 		zohocorp manageengine_applications_manager Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. CWE-89
SQL Injection 		CVE-2020-16267 2024-11-21 14:07 2020-10-7 Show GitHub Exploit DB Packet Storm
212269 7.8 HIGH
Local 		msi ambientlink_mslo64_firmware The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). CWE-787
 Out-of-bounds Write 		CVE-2020-17382 2024-11-21 14:07 2020-10-2 Show GitHub Exploit DB Packet Storm
212270 6.8 MEDIUM
Network 		istio istio In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or n… NVD-CWE-noinfo
CVE-2020-16844 2024-11-21 14:07 2020-10-2 Show GitHub Exploit DB Packet Storm