Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231291 6.5 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/forum_display.pl における他のユーザになりすまされる脆弱性 - CVE-2007-3418 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231292 4.3 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3417 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231293 5 警告 web-app.org
web-app.net
- web-app.org WebAPP などのプロフィールなどの管理におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-3416 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231294 7.5 危険 phpraider - phpRaider の index.php における SQL インジェクションの脆弱性 - CVE-2007-3415 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231295 5 警告 sergey lyubka - Sergey Lyubka Simple HTTPD における重要な情報を取得される脆弱性 - CVE-2007-3407 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231296 5 警告 sitedepth - SiteDepth CMS の ShowImage.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3404 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231297 7.5 危険 phpee - PPhlogger の include/get_userdata.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3399 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231298 2.1 注意 レッドハット - x86_64 プラットフォーム上で稼動している RHEL のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-3379 2012-12-20 18:19 2007-04-28 Show GitHub Exploit DB Packet Storm
231299 5 警告 レッドハット - redhat-cluster-suite における以前のリクエストから重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2007-3373 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
231300 7.5 危険 powl - Powl の plugins/widgets/htmledit/htmledit.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3371 2012-12-20 18:19 2007-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210811 6.3 MEDIUM
Network
google tensorflow In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input arguments form a valid sparse tensor. In particular, there is no validation that the … - CVE-2020-15197 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210812 9.9 CRITICAL
Network
google tensorflow In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same shape as the data. The check exists for … CWE-125
Out-of-bounds Read
CVE-2020-15196 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210813 5.3 MEDIUM
Network
google
opensuse
tensorflow
leap
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmptyRowsGrad` implementation has incomplete validation of the shapes of its arguments. Although `reverse_index_map… - CVE-2020-15194 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210814 7.1 HIGH
Network
google
opensuse
tensorflow
leap
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized memory resulting in further memory corruption. This is because the pybind11 gl… CWE-908
 Use of Uninitialized Resource
CVE-2020-15193 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210815 4.3 MEDIUM
Network
google
opensuse
tensorflow
leap
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlpack.to_dlpack` there is a memory leak following an expected validation failure. The issue occurs because the `… CWE-20
 Improper Input Validation 
CVE-2020-15192 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210816 5.3 MEDIUM
Network
google
opensuse
tensorflow
leap
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variables to bind to `nullptr` while setting a `status` v… CWE-252
 Unchecked Return Value
CVE-2020-15191 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210817 5.3 MEDIUM
Network
google
opensuse
tensorflow
leap
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Switch` operation takes as input a tensor and a boolean and outputs two tensors. Depending on the boolean value, o… - CVE-2020-15190 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
210818 9.8 CRITICAL
Network
broadcom fabric_operating_system Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input. NVD-CWE-noinfo
CVE-2020-15374 2024-11-21 14:05 2020-09-25 Show GitHub Exploit DB Packet Storm
210819 9.8 CRITICAL
Network
broadcom fabric_operating_system Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform va… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2020-15373 2024-11-21 14:05 2020-09-25 Show GitHub Exploit DB Packet Storm
210820 5.5 MEDIUM
Local
broadcom fabric_operating_system A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacke… CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2020-15372 2024-11-21 14:05 2020-09-25 Show GitHub Exploit DB Packet Storm