Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228201 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228202 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228203 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228204 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228205 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228206 8.5 危険 sofaware - Check Point SofaWare Safe@Office における権限を取得される脆弱性 - CVE-2007-3464 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228207 6 警告 sofaware - Check Point SofaWare Safe@Office におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3462 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228208 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe におけるパスワード要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3455 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228209 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の CGIOCommon.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3454 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228210 4.3 警告 sj labs - SJ Labs SJphone におけるバッファオーバーフローの脆弱性 - CVE-2007-3445 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200041 7.2 HIGH
Network 		gilacms gila_cms In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-28692 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
200042 7.5 HIGH
Network 		cloudavid pparam Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-28723 2024-11-21 14:23 2020-11-17 Show GitHub Exploit DB Packet Storm
200043 6.8 MEDIUM
Physics 		vw polo_firmware The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a me… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-28656 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
200044 5.4 MEDIUM
Network 		wpbakery page_builder The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles. CWE-79
Cross-site Scripting 		CVE-2020-28650 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
200045 8.8 HIGH
Network 		orbisius child_theme_creator The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file. CWE-352
 Origin Validation Error 		CVE-2020-28649 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
200046 8.8 HIGH
Network 		nagios nagios_xi Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to execute remote code. CWE-20
 Improper Input Validation  		CVE-2020-28648 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
200047 9.8 CRITICAL
Network 		infinitewp infinitewp In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks. CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2020-28642 2024-11-21 14:23 2020-11-16 Show GitHub Exploit DB Packet Storm
200048 9.8 CRITICAL
Network 		dyne tomb ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only … CWE-287
Improper Authentication 		CVE-2020-28638 2024-11-21 14:23 2020-11-14 Show GitHub Exploit DB Packet Storm
200049 8.8 HIGH
Network 		togglz togglz The console in Togglz before 2.9.4 allows CSRF. CWE-352
 Origin Validation Error 		CVE-2020-28191 2024-11-21 14:22 2022-12-27 Show GitHub Exploit DB Packet Storm
200050 7.8 HIGH
Local 		beyondtrust privilege_management_for_windows In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-28369 2024-11-21 14:22 2023-12-13 Show GitHub Exploit DB Packet Storm