Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228231 6.8 警告 tecnick.com - TCExam の shared/config/tce_config.php におけるクロスサイトスクリプティング攻撃 (XSS) を実行される脆弱性 - CVE-2007-2431 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228232 7.8 危険 tecnick.com - TCExam の shared/code/tce_tmx.php における cache/ 配下の任意の PHP ファイルを作成される脆弱性 - CVE-2007-2430 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228233 7.5 危険 pnflashgames - PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性 - CVE-2007-2427 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228234 7.5 危険 wildbits - WordPress 用の myGallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2426 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228235 7.5 危険 the merchant project - themerchant の help/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2424 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228236 10 危険 RSAセキュリティ
Progress Software Corporation		 - 複数の RSA 製品で使用される Progress Software Progress および OpenEdge におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2417 2012-12-20 18:19 2007-07-15 Show GitHub Exploit DB Packet Storm
228237 5 警告 pi3web - Pi3Web Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-2415 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228238 4 警告 Samba Project - Apple Mac OS X 上で稼動している Samba サーバにおける割り当てを超えるディスクスペースを使用される脆弱性 - CVE-2007-2407 2012-12-20 18:19 2007-07-31 Show GitHub Exploit DB Packet Storm
228239 5 警告 Yahoo! - Yahoo! UI フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2385 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
228240 7.8 危険 script.aculo.us - Script.aculo.us フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2384 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199901 9.8 CRITICAL
Network 		sonar-wrapper_project sonar-wrapper This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js. CWE-77
Command Injection 		CVE-2020-28443 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199902 9.8 CRITICAL
Network 		conf-cfg-ini_project conf-cfg-ini This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28441 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199903 9.8 CRITICAL
Network 		deferred-exec_project deferred-exec This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js CWE-77
Command Injection 		CVE-2020-28438 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199904 9.8 CRITICAL
Network 		google-cloudstorage-commands_project google-cloudstorage-commands This affects all versions of package google-cloudstorage-commands. CWE-77
Command Injection 		CVE-2020-28436 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199905 9.8 CRITICAL
Network 		ffmpeg-sdk_project ffmpeg-sdk This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js. CWE-77
Command Injection 		CVE-2020-28435 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199906 7.8 HIGH
Local 		git-archive_project git-archive All versions of package git-archive are vulnerable to Command Injection via the exports function. CWE-77
Command Injection 		CVE-2020-28422 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199907 9.8 CRITICAL
Network 		form form.io A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was … CWE-74
Injection 		CVE-2020-28246 2024-11-21 14:22 2022-06-2 Show GitHub Exploit DB Packet Storm
199908 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28604 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
199909 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28603 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
199910 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28602 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm