Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232121 5 警告 pinkcrow designs - PinkCrow Designs Gallery または maGAZIn の phpThumb.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2643 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232122 7.8 危険 r2k - R2K Gallery の galeria.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2642 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232123 7.5 危険 w1l3d4 - W1L3D4 Philboard の W1L3D4_bolum.asp における SQL インジェクションの脆弱性 - CVE-2007-2641 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232124 10 危険 prosysinfo - TFTPdWin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2639 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232125 10 危険 positive software - H-Sphere SiteStudio におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2633 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232126 7.5 危険 SquirrelMail Project - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2631 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
232127 6.8 警告 WordPress.org - WordPress の sidebar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2627 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
232128 7.5 危険 taskdriver - TaskDriver における SQL インジェクションの脆弱性 - CVE-2007-2622 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
232129 4.6 警告 シマンテック - Symantec pcAnywhere における資格情報を取得される脆弱性 - CVE-2007-2619 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
232130 2.1 注意 サン・マイクロシステムズ - Sun Solaris の SRS Net Connect Software Proxy Core パッケージにおける任意のファイルの最初の行を読まれる脆弱性 - CVE-2007-2617 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211721 7.4 HIGH
Network 		microsoft sharepoint_foundation
sharepoint_enterprise_server
sharepoint_server 		<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated att… CWE-79
Cross-site Scripting 		CVE-2020-1345 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211722 7.8 HIGH
Local 		microsoft office_online_server
sharepoint_server
office
365_apps 		<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a spe… NVD-CWE-noinfo
CVE-2020-1338 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211723 7.8 HIGH
Local 		microsoft excel
office_web_apps
office
sharepoint_server
office_online_server
365_apps 		<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability coul… NVD-CWE-noinfo
CVE-2020-1335 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211724 7.8 HIGH
Local 		microsoft excel
office
365_apps 		<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability coul… NVD-CWE-noinfo
CVE-2020-1332 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211725 7.3 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take contro… NVD-CWE-noinfo
CVE-2020-1319 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211726 7.0 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.… NVD-CWE-noinfo
CVE-2020-1308 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211727 5.5 MEDIUM
Local 		microsoft windows_10
windows_server_2019
windows_server_2016 		<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in … NVD-CWE-noinfo
CVE-2020-1303 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211728 8.4 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability co… NVD-CWE-noinfo
CVE-2020-1285 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211729 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain… NVD-CWE-noinfo
CVE-2020-1256 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm
211730 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		<p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted ap… NVD-CWE-noinfo
CVE-2020-1252 2024-11-21 14:10 2020-09-12 Show GitHub Exploit DB Packet Storm