Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227921 6.8 警告 wheatblog - wB の admin/login.php における SQL インジェクションの脆弱性 - CVE-2007-3557 2012-12-20 18:19 2007-07-4 Show GitHub Exploit DB Packet Storm
227922 7.5 危険 Vastal I-Tech & Co. - Buddy Zone の view_sub_cat.php における SQL インジェクションの脆弱性 - CVE-2007-3549 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227923 7.1 危険 w3filer - W3Filer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3548 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227924 7.8 危険 qt-cute - QuickTicket の qti_checkname.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3547 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227925 7.1 危険 warzone - Warzone 2100 Resurrection におけるバッファオーバーフローの脆弱性 - CVE-2007-3545 2012-12-20 18:19 2007-06-22 Show GitHub Exploit DB Packet Storm
227926 6.5 警告 WordPress.org - WordPress および WordPress MU の wp-app.php などにおける任意の PHP コードを実行される脆弱性 - CVE-2007-3544 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227927 6 警告 WordPress.org - WordPress および WordPress MU における任意の PHP コードを実行される脆弱性 - CVE-2007-3543 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227928 4.3 警告 PluXml - Pluxml の admin/auth.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3542 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227929 4.3 警告 rainworx - rwAuction Pro の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3540 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
227930 7.5 危険 qt-cute - QuickTicket およびの QuickTalk フォーラムにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3539 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200021 7.5 HIGH
Network 		three_project three This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function build_blank (n) { var ret = "rgb(" for (var i = 0; i < n; i+… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-28496 2024-11-21 14:22 2021-02-19 Show GitHub Exploit DB Packet Storm
200022 9.8 CRITICAL
Network 		async-git_project async-git The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb') CWE-78
OS Command  		CVE-2020-28490 2024-11-21 14:22 2021-02-19 Show GitHub Exploit DB Packet Storm
200023 7.2 HIGH
Network 		microweber microweber A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulner… CWE-22
Path Traversal 		CVE-2020-28337 2024-11-21 14:22 2021-02-16 Show GitHub Exploit DB Packet Storm
200024 5.3 MEDIUM
Network 		lodash
oracle
siemens 		lodash
primavera_unifier
peoplesoft_enterprise_peopletools
retail_customer_management_and_segmentation_foundation
communications_services_gatekeeper
enterprise_communications_broker 		Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions. NVD-CWE-Other
CVE-2020-28500 2024-11-21 14:22 2021-02-15 Show GitHub Exploit DB Packet Storm
200025 7.8 HIGH
Local 		prusa3d prusaslicer A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead … CWE-787
 Out-of-bounds Write 		CVE-2020-28596 2024-11-21 14:22 2021-02-11 Show GitHub Exploit DB Packet Storm
200026 7.8 HIGH
Local 		prusa3d prusaslicer An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code ex… CWE-787
 Out-of-bounds Write 		CVE-2020-28595 2024-11-21 14:22 2021-02-11 Show GitHub Exploit DB Packet Storm
200027 5.5 MEDIUM
Local 		siemens jt2go
teamcenter_visualization 		A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when p… - CVE-2020-28394 2024-11-21 14:22 2021-02-10 Show GitHub Exploit DB Packet Storm
200028 7.8 HIGH
Local 		siemens simaris_configuration A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default target folder, incorrect permissions are configured for the application folder and… - CVE-2020-28392 2024-11-21 14:22 2021-02-10 Show GitHub Exploit DB Packet Storm
200029 5.3 MEDIUM
Network 		siemens nucleus_source_code
nucleus_net
capital_vstar
pluscontrol_1st_gen
nucleus_readystart 		A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5… NVD-CWE-Other
CVE-2020-28388 2024-11-21 14:22 2021-02-10 Show GitHub Exploit DB Packet Storm
200030 8.6 HIGH
Network 		decal_project decal This affects all versions of package decal. The vulnerability is in the extend function. NVD-CWE-Other
CVE-2020-28450 2024-11-21 14:22 2021-02-5 Show GitHub Exploit DB Packet Storm