Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227831	4.3	警告	WordPress.org	-	WordPress の wp-register.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5105	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227832	6.8	警告	wordsmith	-	Wordsmith の config.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5103	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227833	6.8	警告	wordsmith	-	Wordsmith の config.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5102	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227834	6.8	警告	phpBB	-	phpBB Plus における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5100	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227835	7.5	危険	sk.log	-	sk.log の php-inc/log.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5089	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227836	4.3	警告	sisd	-	Freeside の search/cust_bill_event.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5088	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227837	10	危険	quiksoft	-	Quiksoft EasyMail MessagePrinter Object の emprint.DLL におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5070	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227838	7.5	危険	phpfullannu	-	PFA の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5068	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227839	6.8	警告	迅雷	-	Xunlei Web Thunder の特定の ActiveX コントロールなどにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5064	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227840	4.3	警告	xcms	-	XCMS の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-5060	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210471	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information t…	NVD-CWE-noinfo	CVE-2020-0941	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210472	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to f…	NVD-CWE-noinfo	CVE-2020-0928	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210473	8.8	HIGH Network	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary c…	NVD-CWE-noinfo	CVE-2020-0922	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210474	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai…	NVD-CWE-noinfo	CVE-2020-0914	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210475	7.0	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to ga…	NVD-CWE-noinfo	CVE-2020-0912	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210476	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co…	NVD-CWE-noinfo	CVE-2020-0911	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210477	7.5	HIGH Network	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a vict…	NVD-CWE-noinfo	CVE-2020-0908	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210478	6.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the v…	CWE-20 Improper Input Validation	CVE-2020-0904	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210479	6.5	MEDIUM Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the v…	NVD-CWE-noinfo	CVE-2020-0890	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

210480	7.8	HIGH Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated pr…	NVD-CWE-noinfo	CVE-2020-0886	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed