Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228941 7.5 危険 wf-links - XOOPS 用の WF-Links モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2373 2012-12-20 18:19 2005-06-22 Show GitHub Exploit DB Packet Storm
228942 9.3 危険 シマンテック - Windows 用の Symantec Storage Foundation における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2279 2012-12-20 18:19 2007-06-1 Show GitHub Exploit DB Packet Storm
228943 7.5 危険 Plogger Project - Plogger におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2277 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228944 9.4 危険 rajneel lal totaram - Rajneel Lal TotaRam USP FOSS におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2271 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228945 5 警告 swsoft - Windows 用の SWsoft Plesk の top.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2269 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228946 5 警告 swsoft - Windows 用の SWsoft Plesk におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2268 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228947 6.8 警告 サン・マイクロシステムズ - Sun Cluster および Solaris Cluster におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2267 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
228948 10 危険 Progress Software Corporation - Progress Webspeed Messenger における任意のファイルを実行される脆弱性 CWE-DesignError
CVE-2007-2266 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228949 6.8 警告 phpee - YA Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2265 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
228950 7.5 危険 sinato - Sinato jmuffin の html/php/detail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2262 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210021 5.3 MEDIUM
Network 		trusteddomain
fedoraproject 		opendmarc
fedora 		OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsin… CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-12272 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210022 9.8 CRITICAL
Network 		testlink testlink In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web s… NVD-CWE-noinfo
CVE-2020-12274 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210023 7.5 HIGH
Network 		testlink testlink In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. CWE-311
CWE-522
Missing Encryption of Sensitive Data
 Insufficiently Protected Credentials 		CVE-2020-12273 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210024 6.1 MEDIUM
Network 		grafana grafana Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CWE-79
Cross-site Scripting 		CVE-2020-12052 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210025 9.8 CRITICAL
Network 		sophos sfos A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with eithe… CWE-89
SQL Injection 		CVE-2020-12271 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210026 9.8 CRITICAL
Network 		artifex
debian
opensuse 		jbig2dec
debian_linux
leap 		jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2020-12268 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210027 9.8 CRITICAL
Network 		qt qt setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. CWE-416
 Use After Free 		CVE-2020-12267 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210028 9.8 CRITICAL
Network 		decompress_project decompress The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal. CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2020-12265 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210029 7.8 HIGH
Local 		avira antivirus Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink. CWE-59
Link Following 		CVE-2020-12254 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
210030 6.5 MEDIUM
Adjacent 		bluezone bluezone React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: … CWE-330
 Use of Insufficiently Random Values 		CVE-2020-12270 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm