Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228611	7.5	危険	witshare	-	witshare の index.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-1928	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228612	4.3	警告	Youngzsoft	-	CmailServer WebMail の signup.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-1927	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228613	6.5	警告	tru-zone	-	Tru-Zone Nuke ET の modules/Your_Account/index.php における任意のアカウントを削除される脆弱性	-	CVE-2007-1925	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228614	7.5	危険	smodbip	-	SmodBIP の aktualnosci モジュールの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-1920	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228615	5	警告	SAP	-	SAP RFC Library の RFC_SET_REG_SERVER_PROPERTY 関数におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-1918	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228616	10	危険	SAP	-	SAP RFC Library の SYSTEM_CREATE_INSTANCE 関数におけるバッファオーバーフローの脆弱性	-	CVE-2007-1917	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228617	10	危険	SAP	-	SAP RFC Library の RFC_START_GUI 関数におけるバッファオーバーフローの脆弱性	-	CVE-2007-1916	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228618	7.5	危険	SAP	-	SAP RFC Library の RFC_START_PROGRAM 関数におけるバッファオーバーフローの脆弱性	-	CVE-2007-1915	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228619	7.8	危険	SAP	-	SAP RFC Library の RFC_START_PROGRAM 関数における重要な情報を取得される脆弱性	-	CVE-2007-1914	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

228620	5	警告	SAP	-	SAP RFC Library の TRUSTED_SYSTEM_SECURITY 関数におけるシステムおよびドメイン上のユーザーとグループの存在を確認される脆弱性	-	CVE-2007-1913	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210351	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-language.php by adding a question mar…	CWE-79 Cross-site Scripting	CVE-2020-10396	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210352	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-group.php by adding a question mark (…	CWE-79 Cross-site Scripting	CVE-2020-10395	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210353	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-glossary.php by adding a question mar…	CWE-79 Cross-site Scripting	CVE-2020-10394	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210354	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-field.php by adding a question mark (…	CWE-79 Cross-site Scripting	CVE-2020-10393	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210355	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-category.php by adding a question mar…	CWE-79 Cross-site Scripting	CVE-2020-10392	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210356	4.8	MEDIUM Network	chadhaajay	phpkb	The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-article.php by adding a question mark…	CWE-79 Cross-site Scripting	CVE-2020-10391	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210357	7.2	HIGH Network	chadhaajay	phpkb	OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by savin…	CWE-78 OS Command	CVE-2020-10390	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210358	7.2	HIGH Network	chadhaajay	phpkb	admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.	CWE-94 Code Injection	CVE-2020-10389	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210359	5.4	MEDIUM Network	chadhaajay	phpkb	The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-…	CWE-79 Cross-site Scripting	CVE-2020-10388	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

210360	4.9	MEDIUM Network	chadhaajay	phpkb	Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter fil…	CWE-22 Path Traversal	CVE-2020-10387	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm