Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246611 6.4 警告 feedburner - WordPress 用 FeedBurner FeedSmith プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5229 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246612 3.5 注意 Drupal - Drupal 用の Project issue tradcking モジュールの subscription 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5228 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
246613 4.3 警告 Blackboard, Inc. - BlackBoard Academic Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5227 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246614 5 警告 dircproxy - dircproxy の irc_server.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5226 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246615 6.8 警告 AlstraSoft - AlstraSoft Affiliate Network Pro におけるローカルファイルをインクルードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5223 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246616 7.5 危険 asp product catalog - ASP Product Catalog の catalog.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5220 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246617 6.4 警告 サイバーリンク株式会社 - CyberLink PowerDVD の CLAVSetting モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5219 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246618 4.3 警告 don barnes - Don Barnes DRBGuestbook の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5218 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246619 6.8 警告 altnet
kazaa
grokster
- Kazaa などで使用される Altnet Download Manager の adm4.dll の ADM4 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5217 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246620 6.8 警告 e-ark - e-Ark における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5216 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218791 7.8 HIGH
Local
google android In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe… CWE-787
 Out-of-bounds Write
CVE-2020-0094 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218792 5.0 MEDIUM
Local
google
debian
canonical
libexif_project
opensuse
android
debian_linux
ubuntu_linux
libexif
leap
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile… CWE-125
Out-of-bounds Read
CVE-2020-0093 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218793 5.0 MEDIUM
Local
google android In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosur… CWE-200
Information Exposure
CVE-2020-0092 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218794 5.5 MEDIUM
Local
google android In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 NVD-CWE-noinfo
CVE-2020-0091 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218795 5.5 MEDIUM
Local
google android An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 NVD-CWE-noinfo
CVE-2020-0090 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218796 5.5 MEDIUM
Local
google android An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448 NVD-CWE-noinfo
CVE-2020-0065 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218797 5.5 MEDIUM
Local
google android An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855 NVD-CWE-noinfo
CVE-2020-0064 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218798 7.8 HIGH
Local
google android In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execut… CWE-276
Incorrect Default Permissions 
CVE-2020-0024 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
218799 8.1 HIGH
Network
dahuasecurity sd6al_firmware
sd5a_firmware
sd1a_firmware
ptz1a_firmware
sd50_firmware
sd52c_firmware
ipc-hx5842h_firmware
ipc-hx7842h_firmware
ipc-hx2xxx_firmware
ipc-hxxx5x4x_firmware
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak securi… CWE-276
Incorrect Default Permissions 
CVE-2019-9682 2024-11-21 13:52 2020-05-14 Show GitHub Exploit DB Packet Storm
218800 7.8 HIGH
Local
google android In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server … CWE-502
 Deserialization of Untrusted Data
CVE-2020-0082 2024-11-21 13:52 2020-04-18 Show GitHub Exploit DB Packet Storm