Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231601 10 危険 xeforum - Xeweb XEForum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3500 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
231602 6.4 警告 slackroll - SlackRoll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3499 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
231603 4.3 警告 SAP - SAP NetWeaver Nw04 の BC-WD-JAV におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3496 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
231604 4.3 警告 SAP - SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3495 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
231605 7.5 危険 Progress Software Corporation - Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性 - CVE-2007-3491 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
231606 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
231607 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
231608 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231609 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231610 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212171 9.8 CRITICAL
Network 		saltstack
debian
fedoraproject 		salt
debian_linux
fedora 		An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. CWE-78
OS Command  		CVE-2020-16846 2024-11-21 14:07 2020-11-6 Show GitHub Exploit DB Packet Storm
212172 9.1 CRITICAL
Network 		winstonprivacy winston_firmware Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-16263 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212173 7.8 HIGH
Local 		winstonprivacy winston_firmware Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. CWE-269
 Improper Privilege Management 		CVE-2020-16262 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212174 6.8 MEDIUM
Physics 		winstonprivacy winston_firmware Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. CWE-284
Improper Access Control 		CVE-2020-16261 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212175 7.5 HIGH
Network 		winstonprivacy winston_firmware Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation. CWE-862
 Missing Authorization 		CVE-2020-16260 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212176 9.8 CRITICAL
Network 		winstonprivacy winston_firmware Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user. NVD-CWE-noinfo
CVE-2020-16259 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212177 7.1 HIGH
Local 		winstonprivacy winston_firmware Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-16258 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212178 8.8 HIGH
Network 		winstonprivacy winston_firmware The API on Winston 1.5.4 devices is vulnerable to CSRF. CWE-352
 Origin Validation Error 		CVE-2020-16256 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212179 9.8 CRITICAL
Network 		winstonprivacy winston_firmware Winston 1.5.4 devices are vulnerable to command injection via the API. CWE-78
OS Command  		CVE-2020-16257 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
212180 7.5 HIGH
Network 		arista eos Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DH… NVD-CWE-noinfo
CVE-2020-17355 2024-11-21 14:07 2020-10-22 Show GitHub Exploit DB Packet Storm