Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231471 10 危険 snaps gallery - Snaps! Gallery の Admin/users.php における任意のユーザ名を変更される脆弱性 - CVE-2007-2715 2012-12-20 18:19 2007-05-16 Show GitHub Exploit DB Packet Storm
231472 10 危険 tinyirc - TinyIdentD におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2711 2012-12-20 18:19 2007-05-16 Show GitHub Exploit DB Packet Storm
231473 6.8 警告 simple php scripts gallery - sphp の Ivan Peevski gallery における任意の PHP コードを実行される脆弱性 - CVE-2007-2679 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231474 7.5 危険 phpchess - phpChess Community Edition における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2677 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231475 7.5 危険 PreProject.com - Pre Classifieds Listings の search.php における SQL インジェクションの脆弱性 - CVE-2007-2675 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231476 7.5 危険 PreProject.com - Pre Shopping Mall の detail.php における SQL インジェクションの脆弱性 - CVE-2007-2674 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231477 7.5 危険 thinc4orce marketing group - PHP Coupon Script の index.php における SQL インジェクションの脆弱性 - CVE-2007-2672 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231478 6.8 警告 webdesproxy - webdesproxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2668 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231479 7.5 危険 tomasz rekawek - Yaap の includes/common.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2664 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
231480 7.8 危険 precisionid barcode - PrecisionID_DataMatrix.DLL の PrecisionID Barcode ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2657 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212121 9.1 CRITICAL
Network 		redhat cloudforms_management_engine A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker whi… CWE-78
OS Command  		CVE-2020-14324 2024-11-21 14:03 2020-08-11 Show GitHub Exploit DB Packet Storm
212122 9.1 CRITICAL
Network 		redhat cloudforms Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with… NVD-CWE-noinfo
CVE-2020-14325 2024-11-21 14:03 2020-08-11 Show GitHub Exploit DB Packet Storm
212123 5.5 MEDIUM
Local 		x.org
debian
canonical 		xorg-server
debian_linux
ubuntu_linux 		A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could r… - CVE-2020-14347 2024-11-21 14:03 2020-08-5 Show GitHub Exploit DB Packet Storm
212124 6.7 MEDIUM
Local 		x.org
fedoraproject
canonical
opensuse 		libx11
fedora
ubuntu_linux
leap 		An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setu… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-14344 2024-11-21 14:03 2020-08-5 Show GitHub Exploit DB Packet Storm
212125 5.9 MEDIUM
Network 		redhat enmasse
amq_online 		It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example authoris… CWE-352
 Origin Validation Error 		CVE-2020-14319 2024-11-21 14:03 2020-08-4 Show GitHub Exploit DB Packet Storm
212126 7.5 HIGH
Network 		inductiveautomation ignition_gateway The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13). CWE-862
 Missing Authorization 		CVE-2020-14520 2024-11-21 14:03 2020-07-31 Show GitHub Exploit DB Packet Storm
212127 5.8 MEDIUM
Network 		redhat ansible_tower A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default or… CWE-209
Information Exposure Through an Error Message 		CVE-2020-14337 2024-11-21 14:03 2020-07-31 Show GitHub Exploit DB Packet Storm
212128 8.8 HIGH
Local 		redhat satellite A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance. - CVE-2020-14334 2024-11-21 14:03 2020-07-31 Show GitHub Exploit DB Packet Storm
212129 8.8 HIGH
Network 		freemedsoftware openclinic_ga OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-14488 2024-11-21 14:03 2020-07-29 Show GitHub Exploit DB Packet Storm
212130 9.8 CRITICAL
Network 		freemedsoftware openclinic_ga OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbit… NVD-CWE-Other
CVE-2020-14487 2024-11-21 14:03 2020-07-29 Show GitHub Exploit DB Packet Storm