Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227691 6.8 警告 picozip - Acubix PicoZip におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2058 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
227692 5 警告 ricargbook - RicarGBooK の header.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2050 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
227693 5 警告 webmethods - webMethods Glue の Management Console におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2048 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
227694 4.9 警告 レッドハット - lha の lharc.c におけるファイルを読み書きされる脆弱性 - CVE-2007-2030 2012-12-20 18:19 2007-04-16 Show GitHub Exploit DB Packet Storm
227695 7.5 危険 PhpWiki - PhpWiki の lib/plugin/UpLoad.php における二重拡張子を伴う任意の PHP ファイルを実行される脆弱性 - CVE-2007-2025 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
227696 6.8 警告 PhpWiki - PhpWiki の lib/plugin/UpLoad.php における任意の PHP ファイルアップロードされる脆弱性 - CVE-2007-2024 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
227697 7.2 危険 secustick - Secustick USB フラッシュドライブの USB20.dll における認証要件を回避される脆弱性 - CVE-2007-2023 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
227698 7.5 危険 pineapple technologies - Pineapple Technologies Lore における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2021 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227699 7.5 危険 tomex - phpGalleryScript の init.gallery.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2019 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227700 4.3 警告 The phpMyAdmin Project - phpMyAdmin の mysql/phpinfo.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2016 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199751 9.8 CRITICAL
Network 		exim exim Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-28020 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199752 7.5 HIGH
Network 		exim exim Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a clien… CWE-665
 Improper Initialization 		CVE-2020-28019 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199753 9.8 CRITICAL
Network 		exim exim Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL. CWE-416
 Use After Free 		CVE-2020-28018 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199754 9.8 CRITICAL
Network 		exim exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of res… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-28017 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199755 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase. CWE-787
 Out-of-bounds Write 		CVE-2020-28016 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199756 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character. NVD-CWE-Other
CVE-2020-28015 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199757 6.1 MEDIUM
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten. CWE-269
 Improper Privilege Management 		CVE-2020-28014 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199758 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the i… CWE-787
 Out-of-bounds Write 		CVE-2020-28013 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199759 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag. NVD-CWE-Other
CVE-2020-28012 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199760 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. CWE-787
 Out-of-bounds Write 		CVE-2020-28011 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm