Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227651 5 警告 swsoft - Windows 用の SWsoft Plesk におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2268 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227652 6.8 警告 サン・マイクロシステムズ - Sun Cluster および Solaris Cluster におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2267 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
227653 10 危険 Progress Software Corporation - Progress Webspeed Messenger における任意のファイルを実行される脆弱性 CWE-DesignError
CVE-2007-2266 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227654 6.8 警告 phpee - YA Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2265 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227655 7.5 危険 sinato - Sinato jmuffin の html/php/detail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-2262 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227656 7.5 危険 realink - C-Arbre の espaces/communiques/annotations.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2261 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227657 7.5 危険 phpmybibli - PHPMyBibli の includes/init.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2258 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227658 4.3 警告 tjschat - TJSChat の you.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2256 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
227659 7.5 危険 Xaraya - Xaraya の Roles モジュールにおける権限を取得される脆弱性 - CVE-2007-2251 2012-12-20 18:19 2007-04-22 Show GitHub Exploit DB Packet Storm
227660 7.5 危険 phpmyspace - phpMySpace の modules/news/article.php における SQL インジェクションの脆弱性 - CVE-2007-2247 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199671 5.8 MEDIUM
Physics
linux linux_kernel A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def. CWE-125
Out-of-bounds Read
CVE-2020-28915 2024-11-21 14:23 2020-11-18 Show GitHub Exploit DB Packet Storm
199672 7.1 HIGH
Local
katacontainers kata-containers An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the f… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-28914 2024-11-21 14:23 2020-11-18 Show GitHub Exploit DB Packet Storm
199673 8.8 HIGH
Network
artworks_gallery_in_php\
_css\
_javascript\
_and_mysql_project
artworks_gallery_in_php\
_css\
_javascript\
_and_mysql
The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28688 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199674 8.8 HIGH
Network
artworks_gallery_in_php\
_css\
_javascript\
_and_mysql_project
artworks_gallery_in_php\
_css\
_javascript\
_and_mysql
The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28687 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199675 5.4 MEDIUM
Network
progress moveit_transfer In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a victim within the MOVEit Transfer instance interacts with the stored payload, … CWE-79
Cross-site Scripting
CVE-2020-28647 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199676 8.8 HIGH
Network
horizontcms_project horizontcms An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28693 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199677 7.2 HIGH
Network
gilacms gila_cms In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28692 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199678 7.5 HIGH
Network
cloudavid pparam Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-28723 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
199679 6.8 MEDIUM
Physics
vw polo_firmware The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a me… CWE-354
 Improper Validation of Integrity Check Value
CVE-2020-28656 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
199680 5.4 MEDIUM
Network
wpbakery page_builder The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles. CWE-79
Cross-site Scripting
CVE-2020-28650 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm