Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231581 4.3 警告 VWar - PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2306 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
231582 7.5 危険 qdblog - QDBlog の authenticate.php における SQL インジェクションの脆弱性 - CVE-2007-2305 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
231583 7.5 危険 qdblog - QDBlog におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2304 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
231584 4.3 警告 surat kabar - Endy Kristanto Surat kabar / News Management Online におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2300 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
231585 7.5 危険 wf-links - XOOPS 用の WF-Links モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2373 2012-12-20 18:19 2005-06-22 Show GitHub Exploit DB Packet Storm
231586 9.3 危険 シマンテック - Windows 用の Symantec Storage Foundation における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2279 2012-12-20 18:19 2007-06-1 Show GitHub Exploit DB Packet Storm
231587 7.5 危険 Plogger Project - Plogger におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2277 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231588 9.4 危険 rajneel lal totaram - Rajneel Lal TotaRam USP FOSS におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2271 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231589 5 警告 swsoft - Windows 用の SWsoft Plesk の top.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2269 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231590 5 警告 swsoft - Windows 用の SWsoft Plesk におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2268 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211161 6.4 MEDIUM
Local 		gnu
redhat
canonical
debian
suse
opensuse
microsoft 		grub2
enterprise_linux
ubuntu_linux
debian_linux
suse_linux_enterprise_server
enterprise_linux_atomic_host
leap
openshift_container_platform
windows_server_2012
windows_10<… 		GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported direc… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-15705 2024-11-21 14:06 2020-07-30 Show GitHub Exploit DB Packet Storm
211162 6.1 MEDIUM
Network 		kitodo kitodo.presentation The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-16095 2024-11-21 14:06 2020-07-30 Show GitHub Exploit DB Packet Storm
211163 7.5 HIGH
Network 		claws-mail
fedoraproject 		claws-mail
fedora 		In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree. CWE-674
 Uncontrolled Recursion 		CVE-2020-16094 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
211164 7.5 HIGH
Network 		grin grin Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-15899 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
211165 9.8 CRITICAL
Network 		artifex
canonical
opensuse 		ghostscript
ubuntu_linux
leap 		A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'po… CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound) 		CVE-2020-15900 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
211166 5.3 MEDIUM
Local 		qemu
debian
canonical 		qemu
debian_linux
ubuntu_linux 		hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest … CWE-787
 Out-of-bounds Write 		CVE-2020-15863 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
211167 9.9 CRITICAL
Network 		rconfig rconfig rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability usin… NVD-CWE-noinfo
CVE-2020-15715 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
211168 8.8 HIGH
Network 		rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow t… CWE-89
SQL Injection 		CVE-2020-15714 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
211169 8.8 HIGH
Network 		rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to… CWE-89
SQL Injection 		CVE-2020-15713 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
211170 4.3 MEDIUM
Network 		rconfig rconfig rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByPath.php script containing hexadecimal en… CWE-22
Path Traversal 		CVE-2020-15712 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm