Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231631 5 警告 ricargbook - RicarGBooK の header.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2050 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
231632 5 警告 webmethods - webMethods Glue の Management Console におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2048 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
231633 4.9 警告 レッドハット - lha の lharc.c におけるファイルを読み書きされる脆弱性 - CVE-2007-2030 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
231634 7.5 危険 PhpWiki - PhpWiki の lib/plugin/UpLoad.php における二重拡張子を伴う任意の PHP ファイルを実行される脆弱性 - CVE-2007-2025 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
231635 6.8 警告 PhpWiki - PhpWiki の lib/plugin/UpLoad.php における任意の PHP ファイルアップロードされる脆弱性 - CVE-2007-2024 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
231636 7.2 危険 secustick - Secustick USB フラッシュドライブの USB20.dll における認証要件を回避される脆弱性 - CVE-2007-2023 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
231637 7.5 危険 pineapple technologies - Pineapple Technologies Lore における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2021 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
231638 7.5 危険 tomex - phpGalleryScript の init.gallery.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2019 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
231639 4.3 警告 The phpMyAdmin Project - phpMyAdmin の mysql/phpinfo.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2016 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
231640 6.8 警告 request it - Request It の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2015 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211191 5.4 MEDIUM
Network 		dedecms dedecms A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter. CWE-79
Cross-site Scripting 		CVE-2020-16632 2024-11-21 14:07 2021-05-15 Show GitHub Exploit DB Packet Storm
211192 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		Microsoft Windows Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2020-17162 2024-11-21 14:07 2021-02-26 Show GitHub Exploit DB Packet Storm
211193 7.8 HIGH
Local 		we-con levistudiou Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and… CWE-787
 Out-of-bounds Write 		CVE-2020-16243 2024-11-21 14:07 2021-02-24 Show GitHub Exploit DB Packet Storm
211194 9.8 CRITICAL
Network 		phpok phpok PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the targe… CWE-89
SQL Injection 		CVE-2020-16629 2024-11-21 14:07 2021-02-9 Show GitHub Exploit DB Packet Storm
211195 6.3 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() r… CWE-787
 Out-of-bounds Write 		CVE-2020-17380 2024-11-21 14:07 2021-01-30 Show GitHub Exploit DB Packet Storm
211196 6.1 MEDIUM
Network 		owncloud owncloud ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' CWE-79
Cross-site Scripting 		CVE-2020-16255 2024-11-21 14:07 2021-01-16 Show GitHub Exploit DB Packet Storm
211197 9.9 CRITICAL
Network 		usvn usvn USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the… CWE-78
OS Command  		CVE-2020-17363 2024-11-21 14:07 2020-12-31 Show GitHub Exploit DB Packet Storm
211198 8.8 HIGH
Network 		1e client The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a T… CWE-74
CWE-668
Injection
 Exposure of Resource to Wrong Sphere 		CVE-2020-16268 2024-11-21 14:07 2020-12-30 Show GitHub Exploit DB Packet Storm
211199 9.6 CRITICAL
Network 		notable notable Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true). CWE-79
Cross-site Scripting 		CVE-2020-16608 2024-11-21 14:07 2020-12-11 Show GitHub Exploit DB Packet Storm
211200 7.8 HIGH
Local 		microsoft visual_studio_code Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2020-17159 2024-11-21 14:07 2020-12-10 Show GitHub Exploit DB Packet Storm