Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227801 7.5 危険 phpmyforum - phpMyForum の editpost.php における SQL インジェクションの脆弱性 - CVE-2007-4107 2012-12-20 18:33 2007-06-7 Show GitHub Exploit DB Packet Storm
227802 4.3 警告 sblog - sBlog の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4102 2012-12-20 18:33 2007-07-31 Show GitHub Exploit DB Packet Storm
227803 5.8 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 - CVE-2007-4099 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
227804 5.8 警告 The Tor Project - Tor における任意のストリームへセルを挿入される脆弱性 - CVE-2007-4098 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
227805 6.4 警告 The Tor Project - Tor における仕様に反して重要な情報を取得される脆弱性 - CVE-2007-4097 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
227806 5.8 警告 The Tor Project - Tor におけるバッファオーバーフローの脆弱性 - CVE-2007-4096 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
227807 6.8 警告 rsync.samba.org - rsync の sender.c における任意のコードを実行される脆弱性 - CVE-2007-4091 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
227808 4.3 警告 vikingboard - Vikingboard におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4090 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
227809 4.3 警告 wp-feedstats - WordPress 用の WP-FeedStats プラグインにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4104 2012-12-20 18:33 2006-08-17 Show GitHub Exploit DB Packet Storm
227810 7.5 危険 wikiwebweaver - WikiWebWeaver の index.php における任意のコードを実行される脆弱性 - CVE-2007-4182 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200011 7.8 HIGH
Local 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any u… CWE-77
Command Injection 		CVE-2020-28243 2024-11-21 14:22 2021-02-27 Show GitHub Exploit DB Packet Storm
200012 9.1 CRITICAL
Network 		bestit amazon_pay best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor. CWE-200
Information Exposure 		CVE-2020-28199 2024-11-21 14:22 2021-02-27 Show GitHub Exploit DB Packet Storm
200013 7.8 HIGH
Local 		openscad
fedoraproject 		openscad
fedora 		A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attack… CWE-787
 Out-of-bounds Write 		CVE-2020-28599 2024-11-21 14:22 2021-02-25 Show GitHub Exploit DB Packet Storm
200014 7.8 HIGH
Local 		softmaker planmaker_2021 A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, whic… CWE-787
 Out-of-bounds Write 		CVE-2020-28587 2024-11-21 14:22 2021-02-24 Show GitHub Exploit DB Packet Storm
200015 9.8 CRITICAL
Network 		geojson2kml_project geojson2kml All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){}) CWE-78
OS Command  		CVE-2020-28429 2024-11-21 14:22 2021-02-24 Show GitHub Exploit DB Packet Storm
200016 8.8 HIGH
Network 		png-img_project png-img An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading … CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-28248 2024-11-21 14:22 2021-02-20 Show GitHub Exploit DB Packet Storm
200017 8.8 HIGH
Network 		smartstore smartstorenet An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin accoun… CWE-352
 Origin Validation Error 		CVE-2020-27997 2024-11-21 14:22 2021-02-20 Show GitHub Exploit DB Packet Storm
200018 9.8 CRITICAL
Network 		merge_project merge All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge . NVD-CWE-noinfo
CVE-2020-28499 2024-11-21 14:22 2021-02-19 Show GitHub Exploit DB Packet Storm
200019 7.5 HIGH
Network 		fasterxml
quarkus
oracle 		jackson-dataformats-binary
quarkus
weblogic_server 		This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lan… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-28491 2024-11-21 14:22 2021-02-19 Show GitHub Exploit DB Packet Storm
200020 6.5 MEDIUM
Network 		reportlab
fedoraproject 		reportlab
fedora 		All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Step… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-28463 2024-11-21 14:22 2021-02-19 Show GitHub Exploit DB Packet Storm