Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 10 危険 Progress Software Corporation - Progress Webspeed Messenger における任意のファイルを実行される脆弱性 CWE-DesignError
CVE-2007-2266 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228272 6.8 警告 phpee - YA Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2265 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228273 7.5 危険 sinato - Sinato jmuffin の html/php/detail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2262 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228274 7.5 危険 realink - C-Arbre の espaces/communiques/annotations.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2261 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228275 7.5 危険 phpmybibli - PHPMyBibli の includes/init.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2258 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228276 4.3 警告 tjschat - TJSChat の you.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2256 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228277 7.5 危険 Xaraya - Xaraya の Roles モジュールにおける権限を取得される脆弱性 - CVE-2007-2251 2012-12-20 18:19 2007-04-22 Show GitHub Exploit DB Packet Storm
228278 7.5 危険 phpmyspace - phpMySpace の modules/news/article.php における SQL インジェクションの脆弱性 - CVE-2007-2247 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228279 6.8 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2245 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228280 6.8 警告 PunBB - PunBB の footer.php における include/user/ 配下のローカルファイルをインクルードされる脆弱性 - CVE-2007-2236 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199881 8.8 HIGH
Network 		togglz togglz The console in Togglz before 2.9.4 allows CSRF. CWE-352
 Origin Validation Error 		CVE-2020-28191 2024-11-21 14:22 2022-12-27 Show GitHub Exploit DB Packet Storm
199882 7.8 HIGH
Local 		beyondtrust privilege_management_for_windows In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-28369 2024-11-21 14:22 2023-12-13 Show GitHub Exploit DB Packet Storm
199883 7.1 HIGH
Local 		swtpm_project swtpm In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. CWE-59
Link Following 		CVE-2020-28407 2024-11-21 14:22 2023-11-3 Show GitHub Exploit DB Packet Storm
199884 6.5 MEDIUM
Network 		libdwarf_project libdwarf libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname. CWE-476
 NULL Pointer Dereference 		CVE-2020-28163 2024-11-21 14:22 2023-04-16 Show GitHub Exploit DB Packet Storm
199885 9.8 CRITICAL
Network 		npos-tesseract_project npos-tesseract This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js. CWE-77
Command Injection 		CVE-2020-28453 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199886 9.8 CRITICAL
Network 		image-tiler_project image-tiler This affects the package image-tiler before 2.0.2. CWE-77
Command Injection 		CVE-2020-28451 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199887 9.8 CRITICAL
Network 		heroku-env_project heroku-env This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js. CWE-77
Command Injection 		CVE-2020-28437 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199888 9.8 CRITICAL
Network 		gitblame_project gitblame This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js. CWE-77
Command Injection 		CVE-2020-28434 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199889 9.8 CRITICAL
Network 		node-latex-pdf_project node-latex-pdf This affects all versions of package node-latex-pdf. CWE-77
Command Injection 		CVE-2020-28433 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199890 9.8 CRITICAL
Network 		curljs_project curljs This affects all versions of package curljs. CWE-77
Command Injection 		CVE-2020-28425 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm