Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231401 7.8 危険 sendcard - Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3082 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
231402 7.8 危険 zenturi - Zenturi ProgramChecker の sasatl.dll における任意のファイルをダウンロードされる脆弱性 - CVE-2007-3076 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
231403 7.5 危険 phpreactor - Reactor における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3066 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231404 5 警告 sendcard - SendCard における重要な情報を取得される脆弱性 - CVE-2007-3059 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231405 6.8 警告 XOOPS - XOOPS 用の icontent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3057 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231406 4.3 警告 WebSVN - WebSVN の filedetails.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-3056 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231407 7.5 危険 postnuke software foundation - PostNuke 用の PNphpBB2 モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3052 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231408 7.5 危険 revokesoft - RevokeSoft RevokeBB の inc/class_users.php における SQL インジェクションの脆弱性 - CVE-2007-3051 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231409 10 危険 Vonage - Vonage VoIP Telephone Adapter における管理アクセス権限を取得される脆弱性 - CVE-2007-3047 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231410 4.3 警告 シマンテック - Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における総当たり攻撃を実行される脆弱性 - CVE-2007-3022 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199421 5.4 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows XSS. CWE-79
Cross-site Scripting
CVE-2020-8542 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
199422 6.8 MEDIUM
Network
huawei p30_firmware
p30_pro_firmware
tony-al00b_firmware
HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper … CWE-287
Improper Authentication
CVE-2020-9076 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
199423 6.5 MEDIUM
Network
huawei secospace_usg6300_firmware
secospace_usg6600_firmware
usg6300e_firmware
Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification… CWE-20
 Improper Input Validation 
CVE-2020-9075 2024-11-21 14:39 2020-06-16 Show GitHub Exploit DB Packet Storm
199424 6.8 MEDIUM
Physics
intel innovation_engine_firmware Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of pri… NVD-CWE-noinfo
CVE-2020-8675 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
199425 5.3 MEDIUM
Network
intel active_management_technology_firmware
service_manager
Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable informa… CWE-125
Out-of-bounds Read
CVE-2020-8674 2024-11-21 14:39 2020-06-15 Show GitHub Exploit DB Packet Storm
199426 5.4 MEDIUM
Network
openbrowser_project openbrowser OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated] CWE-276
Incorrect Default Permissions 
CVE-2020-8954 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
199427 8.8 HIGH
Network
couchbase couchbase_server In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request. CWE-352
 Origin Validation Error
CVE-2020-9042 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
199428 7.5 HIGH
Network
couchbase sync_gateway
couchbase_server
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack becau… CWE-404
 Improper Resource Shutdown or Release
CVE-2020-9041 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
199429 7.5 HIGH
Network
couchbase couchbase_server_java_sdk Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically vali… CWE-295
Improper Certificate Validation 
CVE-2020-9040 2024-11-21 14:39 2020-06-9 Show GitHub Exploit DB Packet Storm
199430 6.3 MEDIUM
Network
kubernetes
fedoraproject
kubernetes
fedora
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows cert… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-8555 2024-11-21 14:39 2020-06-6 Show GitHub Exploit DB Packet Storm