Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227641	7.5	危険	webkalk2	-	WebKalk2 の engine/engine.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2307	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

227642	4.3	警告	VWar	-	PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2306	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

227643	7.5	危険	qdblog	-	QDBlog の authenticate.php における SQL インジェクションの脆弱性	-	CVE-2007-2305	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

227644	7.5	危険	qdblog	-	QDBlog におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2304	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

227645	4.3	警告	surat kabar	-	Endy Kristanto Surat kabar / News Management Online におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2300	2012-12-20 18:19	2007-04-26	Show	GitHub Exploit DB Packet Storm

227646	7.5	危険	wf-links	-	XOOPS 用の WF-Links モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-2373	2012-12-20 18:19	2005-06-22	Show	GitHub Exploit DB Packet Storm

227647	9.3	危険	シマンテック	-	Windows 用の Symantec Storage Foundation における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-2279	2012-12-20 18:19	2007-06-1	Show	GitHub Exploit DB Packet Storm

227648	7.5	危険	Plogger Project	-	Plogger におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2007-2277	2012-12-20 18:19	2007-04-25	Show	GitHub Exploit DB Packet Storm

227649	9.4	危険	rajneel lal totaram	-	Rajneel Lal TotaRam USP FOSS におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2271	2012-12-20 18:19	2007-04-25	Show	GitHub Exploit DB Packet Storm

227650	5	警告	swsoft	-	Windows 用の SWsoft Plesk の top.php3 におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2269	2012-12-20 18:19	2007-04-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199861	7.8	HIGH Local	php debian fedoraproject drupal	archive_tar debian_linux fedora drupal	Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.	CWE-502 Deserialization of Untrusted Data	CVE-2020-28948	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199862	5.5	MEDIUM Local	linux fedoraproject debian	linux_kernel fedora debian_linux	An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-28941	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199863	6.1	MEDIUM Network	misp	misp	In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.	CWE-79 Cross-site Scripting	CVE-2020-28947	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199864	4.3	MEDIUM Network	primekey	ejbca	An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the r…	CWE-295 Improper Certificate Validation	CVE-2020-28942	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

199865	6.1	MEDIUM Network	palletsprojects	werkzeug	Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.	CWE-601 Open Redirect	CVE-2020-28724	2024-11-21 14:23	2020-11-19	Show	GitHub Exploit DB Packet Storm

199866	6.5	MEDIUM Network	view_frontend_statistics_project	view_frontend_statistics	An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-28917	2024-11-21 14:23	2020-11-18	Show	GitHub Exploit DB Packet Storm

199867	5.8	MEDIUM Physics	linux	linux_kernel	A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.	CWE-125 Out-of-bounds Read	CVE-2020-28915	2024-11-21 14:23	2020-11-18	Show	GitHub Exploit DB Packet Storm

199868	7.1	HIGH Local	katacontainers	kata-containers	An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the f…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-28914	2024-11-21 14:23	2020-11-18	Show	GitHub Exploit DB Packet Storm

199869	8.8	HIGH Network	artworks_gallery_in_php\ _css\ _javascript\ _and_mysql_project	artworks_gallery_in_php\ _css\ _javascript\ _and_mysql	The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28688	2024-11-21 14:23	2020-11-17	Show	GitHub Exploit DB Packet Storm

199870	8.8	HIGH Network	artworks_gallery_in_php\ _css\ _javascript\ _and_mysql_project	artworks_gallery_in_php\ _css\ _javascript\ _and_mysql	The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28687	2024-11-21 14:23	2020-11-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed