Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227171 6.5 警告 WordPress.org - WordPress の options.php における SQL インジェクションの脆弱性 - CVE-2007-4154 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227172 2.1 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4153 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227173 9.3 危険 visionsoft - Visionsoft Audit の VSAOD におけるリプレイ攻撃を実行される脆弱性 - CVE-2007-4152 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227174 4.3 警告 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4151 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227175 10 危険 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4150 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227176 10 危険 visionsoft - Visionsoft Audit の VSAOD における任意のファイルを作成される脆弱性 - CVE-2007-4149 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227177 10 危険 visionsoft - Visionsoft Audit の VSAOD におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-4148 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227178 4.3 警告 webevents - ebEvent の webevent.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4146 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227179 4 警告 phpcoupon - phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性 - CVE-2007-4143 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
227180 4.3 警告 WordPress.org - WordPress の Temporary Uploads 編集機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4139 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199151 9.8 CRITICAL
Network 		awstats
debian
fedoraproject 		awstats
debian_linux
fedora 		In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists becau… CWE-22
Path Traversal 		CVE-2020-29600 2024-11-21 14:24 2020-12-8 Show GitHub Exploit DB Packet Storm
199152 7.8 HIGH
Local 		imagemagick
debian 		imagemagick
debian_linux 		ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not prope… CWE-91
Blind XPath Injection 		CVE-2020-29599 2024-11-21 14:24 2020-12-8 Show GitHub Exploit DB Packet Storm
199153 9.8 CRITICAL
Network 		incomcms_project incomcms IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-29597 2024-11-21 14:24 2020-12-8 Show GitHub Exploit DB Packet Storm
199154 9.8 CRITICAL
Network 		acdsee photo_studio_2021 PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000031aa. NVD-CWE-noinfo
CVE-2020-29595 2024-11-21 14:24 2020-12-8 Show GitHub Exploit DB Packet Storm
199155 7.5 HIGH
Network 		gnu
redhat
netapp 		glibc
enterprise_linux
cloud_backup
solidfire_baseboard_management_controller 		sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long … CWE-787
 Out-of-bounds Write 		CVE-2020-29573 2024-11-21 14:24 2020-12-6 Show GitHub Exploit DB Packet Storm
199156 6.1 MEDIUM
Network 		misp misp app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field. CWE-79
Cross-site Scripting 		CVE-2020-29572 2024-11-21 14:24 2020-12-6 Show GitHub Exploit DB Packet Storm
199157 6.1 MEDIUM
Network 		openstack
debian 		horizon
debian_linux 		An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would all… CWE-601
Open Redirect 		CVE-2020-29565 2024-11-21 14:24 2020-12-4 Show GitHub Exploit DB Packet Storm
199158 4.8 MEDIUM
Network 		gnu
fedoraproject
netapp 		glibc
fedora
e-series_santricity_os_controller 		The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, … CWE-617
 Reachable Assertion 		CVE-2020-29562 2024-11-21 14:24 2020-12-4 Show GitHub Exploit DB Packet Storm
199159 5.5 MEDIUM
Local 		boom-core risvc-boom An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-29561 2024-11-21 14:24 2020-12-4 Show GitHub Exploit DB Packet Storm
199160 7.8 HIGH
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimi… NVD-CWE-Other
CVE-2020-29534 2024-11-21 14:24 2020-12-4 Show GitHub Exploit DB Packet Storm