Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231401 7.8 危険 sendcard - Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3082 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
231402 7.8 危険 zenturi - Zenturi ProgramChecker の sasatl.dll における任意のファイルをダウンロードされる脆弱性 - CVE-2007-3076 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
231403 7.5 危険 phpreactor - Reactor における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3066 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231404 5 警告 sendcard - SendCard における重要な情報を取得される脆弱性 - CVE-2007-3059 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231405 6.8 警告 XOOPS - XOOPS 用の icontent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3057 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231406 4.3 警告 WebSVN - WebSVN の filedetails.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3056 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231407 7.5 危険 postnuke software foundation - PostNuke 用の PNphpBB2 モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3052 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231408 7.5 危険 revokesoft - RevokeSoft RevokeBB の inc/class_users.php における SQL インジェクションの脆弱性 - CVE-2007-3051 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231409 10 危険 Vonage - Vonage VoIP Telephone Adapter における管理アクセス権限を取得される脆弱性 - CVE-2007-3047 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
231410 4.3 警告 シマンテック - Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における総当たり攻撃を実行される脆弱性 - CVE-2007-3022 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199501 8.1 HIGH
Network 		schneider-electric modicon_tsxety4103_firmware
modicon_tsxety5103_firmware
modicon_tsxp574634_firmware
modicon_tsxp575634_firmware
modicon_tsxp576634_firmware
modicon_quantum_140noe77101_firmware
modi… 		A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) … - CVE-2020-7562 2024-11-21 14:37 2020-11-18 Show GitHub Exploit DB Packet Storm
199502 8.8 HIGH
Network 		tobesoft xplatform Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto:// CWE-20
 Improper Input Validation  		CVE-2020-7841 2024-11-21 14:37 2020-11-17 Show GitHub Exploit DB Packet Storm
199503 9.8 CRITICAL
Network 		y18n_project
oracle
siemens 		y18n
graalvm
sinec_infrastructure_network_services 		The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7774 2024-11-21 14:37 2020-11-17 Show GitHub Exploit DB Packet Storm
199504 6.1 MEDIUM
Network 		markdown-it-highlightjs_project markdown-it-highlightjs This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const mar… CWE-79
Cross-site Scripting 		CVE-2020-7773 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
199505 5.3 MEDIUM
Network 		google firebase\/util This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwr… NVD-CWE-noinfo
CVE-2020-7765 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
199506 9.8 CRITICAL
Network 		doc-path_project doc-path This affects the package doc-path before 2.1.2. NVD-CWE-noinfo
CVE-2020-7772 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
199507 9.8 CRITICAL
Network 		sugarcrm sugarcrm An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenti… CWE-94
CWE-20
Code Injection
 Improper Input Validation  		CVE-2020-7472 2024-11-21 14:37 2020-11-13 Show GitHub Exploit DB Packet Storm
199508 9.8 CRITICAL
Network 		json8_project json8 This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype po… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7770 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
199509 4.8 MEDIUM
Network 		mcafee endpoint_security Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting 		CVE-2020-7333 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
199510 8.8 HIGH
Network 		mcafee endpoint_security Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to … CWE-352
 Origin Validation Error 		CVE-2020-7332 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm