Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246781 3.5 注意 Drupal - Drupal 用の Project issue tradcking モジュールの subscription 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5228 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
246782 4.3 警告 Blackboard, Inc. - BlackBoard Academic Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5227 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246783 5 警告 dircproxy - dircproxy の irc_server.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5226 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246784 6.8 警告 AlstraSoft - AlstraSoft Affiliate Network Pro におけるローカルファイルをインクルードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5223 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246785 7.5 危険 asp product catalog - ASP Product Catalog の catalog.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5220 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246786 6.4 警告 サイバーリンク株式会社 - CyberLink PowerDVD の CLAVSetting モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5219 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246787 4.3 警告 don barnes - Don Barnes DRBGuestbook の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5218 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246788 6.8 警告 altnet
kazaa
grokster		 - Kazaa などで使用される Altnet Download Manager の adm4.dll の ADM4 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5217 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246789 6.8 警告 e-ark - e-Ark における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5216 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
246790 4.3 警告 アクシスコミュニケーションズ - AXIS 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5214 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219601 8.8 HIGH
Network 		3cx
debian 		phone_system_firmware
debian_linux 		PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><sp… CWE-77
Command Injection 		CVE-2019-9972 2024-11-21 13:52 2022-06-8 Show GitHub Exploit DB Packet Storm
219602 8.8 HIGH
Network 		3cx
debian 		phone_system_firmware
debian_linux 		PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs bec… CWE-269
 Improper Privilege Management 		CVE-2019-9971 2024-11-21 13:52 2022-06-8 Show GitHub Exploit DB Packet Storm
219603 7.8 HIGH
Local 		google android In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to local escalation of privilege with no a… NVD-CWE-noinfo
CVE-2020-0025 2024-11-21 13:52 2021-03-11 Show GitHub Exploit DB Packet Storm
219604 5.5 MEDIUM
Local 		google android In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction i… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2020-0019 2024-11-21 13:52 2020-12-15 Show GitHub Exploit DB Packet Storm
219605 7.8 HIGH
Local 		google android In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction … CWE-798
 Use of Hard-coded Credentials 		CVE-2020-0016 2024-11-21 13:52 2020-12-15 Show GitHub Exploit DB Packet Storm
219606 7.8 HIGH
Local 		google android In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no addition… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2020-0099 2024-11-21 13:52 2020-12-15 Show GitHub Exploit DB Packet Storm
219607 7.8 HIGH
Local 		google android In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional execution privileges needed. User interaction is… CWE-862
 Missing Authorization 		CVE-2020-0089 2024-11-21 13:52 2020-09-19 Show GitHub Exploit DB Packet Storm
219608 7.8 HIGH
Local 		google android In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User … CWE-20
CWE-77
 Improper Input Validation 
Command Injection 		CVE-2020-0130 2024-11-21 13:52 2020-09-18 Show GitHub Exploit DB Packet Storm
219609 5.5 MEDIUM
Local 		google android In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is … CWE-125
Out-of-bounds Read 		CVE-2020-0125 2024-11-21 13:52 2020-09-18 Show GitHub Exploit DB Packet Storm
219610 9.8 CRITICAL
Network 		google android There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 CWE-787
 Out-of-bounds Write 		CVE-2020-0123 2024-11-21 13:52 2020-09-18 Show GitHub Exploit DB Packet Storm