Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231841 5 警告 sergey lyubka - Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6326 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
231842 5 警告 xml2owl - xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6322 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
231843 4.3 警告 Roundcube.net - RoundCube webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6321 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231844 6.8 警告 WordPress.org - WordPress の wp-includes/query.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6318 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231845 5.5 警告 Real Time Logic - BarracudaDrive Web Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6317 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231846 4.3 警告 Real Time Logic - BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6316 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231847 4 警告 Real Time Logic - Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2007-6315 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231848 5 警告 Real Time Logic - BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6314 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231849 4.3 警告 ウェブセンス - Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6312 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
231850 4.3 警告 webSPELL - webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6309 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210851 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI). CWE-79
Cross-site Scripting 		CVE-2020-24701 2024-11-21 14:15 2021-01-12 Show GitHub Exploit DB Packet Storm
210852 5.4 MEDIUM
Network 		open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-24700 2024-11-21 14:15 2021-01-12 Show GitHub Exploit DB Packet Storm
210853 7.5 HIGH
Network 		dlink dsl-2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-24577 2024-11-21 14:15 2021-01-8 Show GitHub Exploit DB Packet Storm
210854 7.8 HIGH
Local 		arm arm_compiler Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes … CWE-787
CWE-770
 Out-of-bounds Write
 Allocation of Resources Without Limits or Throttling 		CVE-2020-24658 2024-11-21 14:15 2020-12-25 Show GitHub Exploit DB Packet Storm
210855 9.8 CRITICAL
Network 		abb symphony_\+_historian
symphony_\+_operations 		The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not a… CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2020-24683 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
210856 7.0 HIGH
Local 		abb symphony_\+_historian
symphony_\+_operations 		In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-24680 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
210857 9.8 CRITICAL
Network 		abb symphony_\+_historian
symphony_\+_operations 		A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the serv… CWE-20
 Improper Input Validation  		CVE-2020-24679 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
210858 8.8 HIGH
Network 		abb symphony_\+_historian
symphony_\+_operations 		An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the po… NVD-CWE-noinfo
CVE-2020-24678 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
210859 8.8 HIGH
Network 		abb symphony_\+_historian
symphony_\+_operations 		Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-24677 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
210860 7.8 HIGH
Local 		abb symphony_\+_historian
symphony_\+_operations 		In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (but authenticated) user could execute arbitrary code and res… NVD-CWE-noinfo
CVE-2020-24676 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm