Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228231 6.8 警告 tecnick.com - TCExam の shared/config/tce_config.php におけるクロスサイトスクリプティング攻撃 (XSS) を実行される脆弱性 - CVE-2007-2431 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228232 7.8 危険 tecnick.com - TCExam の shared/code/tce_tmx.php における cache/ 配下の任意の PHP ファイルを作成される脆弱性 - CVE-2007-2430 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228233 7.5 危険 pnflashgames - PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性 - CVE-2007-2427 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228234 7.5 危険 wildbits - WordPress 用の myGallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2426 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228235 7.5 危険 the merchant project - themerchant の help/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2424 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228236 10 危険 RSAセキュリティ
Progress Software Corporation		 - 複数の RSA 製品で使用される Progress Software Progress および OpenEdge におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2417 2012-12-20 18:19 2007-07-15 Show GitHub Exploit DB Packet Storm
228237 5 警告 pi3web - Pi3Web Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-2415 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
228238 4 警告 Samba Project - Apple Mac OS X 上で稼動している Samba サーバにおける割り当てを超えるディスクスペースを使用される脆弱性 - CVE-2007-2407 2012-12-20 18:19 2007-07-31 Show GitHub Exploit DB Packet Storm
228239 5 警告 Yahoo! - Yahoo! UI フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2385 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
228240 7.8 危険 script.aculo.us - Script.aculo.us フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2384 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199911 7.2 HIGH
Network 		hisiphp hisiphp An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user exe… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-28062 2024-11-21 14:22 2022-04-5 Show GitHub Exploit DB Packet Storm
199912 4.3 MEDIUM
Network 		osu ohio_supercomputer_center_open_ondemand The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template. CWE-116
 Improper Encoding or Escaping of Output 		CVE-2020-27958 2024-11-21 14:22 2022-02-27 Show GitHub Exploit DB Packet Storm
199913 9.8 CRITICAL
Network 		chshcms cscms cscms v4.1 allows for SQL injection via the "page_del" function. CWE-89
SQL Injection 		CVE-2020-28103 2024-11-21 14:22 2022-01-12 Show GitHub Exploit DB Packet Storm
199914 9.8 CRITICAL
Network 		chshcms cscms cscms v4.1 allows for SQL injection via the "js_del" function. CWE-89
SQL Injection 		CVE-2020-28102 2024-11-21 14:22 2022-01-12 Show GitHub Exploit DB Packet Storm
199915 6.5 MEDIUM
Network 		genexis platinum_4410_firmware Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router. CWE-352
 Origin Validation Error 		CVE-2020-28137 2024-11-21 14:22 2021-11-11 Show GitHub Exploit DB Packet Storm
199916 8.8 HIGH
Network 		hp color_laserjet_cm4540_mfp_firmware
color_laserjet_enterprise_flow_mfp_m880z_firmware
color_laserjet_managed_flow_mfp_m880zm_firmware
color_laserjet_enterprise_m455_firmware
color_laserjet… 		During installation with certain driver software or application packages an arbitrary code execution could occur. NVD-CWE-noinfo
CVE-2020-28419 2024-11-21 14:22 2021-11-10 Show GitHub Exploit DB Packet Storm
199917 7.8 HIGH
Local 		hp officejet_4650_e6g87a_firmware
officejet_4650_f1h96a_firmware
officejet_4650_f1h96b_firmware
officejet_4650_f1j03a_firmware
officejet_4650_f1j04a_firmware
officejet_4650_f9d37a_firmwar… 		HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could potentiall… NVD-CWE-noinfo
CVE-2020-28416 2024-11-21 14:22 2021-11-4 Show GitHub Exploit DB Packet Storm
199918 7.5 HIGH
Network 		wuzhicms wuzhicms Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-28145 2024-11-21 14:22 2021-10-12 Show GitHub Exploit DB Packet Storm
199919 6.1 MEDIUM
Network 		53kf 53kf Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window. CWE-79
Cross-site Scripting 		CVE-2020-28119 2024-11-21 14:22 2021-10-5 Show GitHub Exploit DB Packet Storm
199920 5.3 MEDIUM
Network 		yandex yandex_browser Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-27970 2024-11-21 14:22 2021-09-13 Show GitHub Exploit DB Packet Storm