Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228971 7.5 危険 scottmanktelow - Stride における管理者権限を取得される脆脆弱性 CWE-200
情報漏えい 		CVE-2007-5432 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228972 7.5 危険 scottmanktelow - Stride における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5430 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228973 4.3 警告 Umisoft - UMI CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5428 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228974 7.5 危険 Tiki Software Community Association - TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5423 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228975 6.8 警告 quoc-huy - Joomla! 用の Quoc-Huy mp3_allopass コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5412 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228976 6.8 警告 picoflat cms - PicoFlat CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5390 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228977 6.8 警告 webdesktop - WebDesktop における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5388 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228978 6.8 警告 pindorama - Pindorama の active/components/xmlrpc/client.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5387 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228979 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5386 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228980 2.6 注意 サン・マイクロシステムズ - Sun JVM におけるマルチピン DNS リバインド攻撃を実行される脆弱性 CWE-16
CWE-20
CVE-2007-5375 2012-12-20 18:33 2007-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209521 6.1 MEDIUM
Network 		webtareas_project webtareas The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string. CWE-79
Cross-site Scripting 		CVE-2020-14973 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
209522 9.8 CRITICAL
Network 		pisay_online_e-learning_system_project pisay_online_e-learning_system Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution (RCE) via… CWE-89
SQL Injection 		CVE-2020-14972 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
209523 7.5 HIGH
Network 		misp misp app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable a… CWE-862
 Missing Authorization 		CVE-2020-14969 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209524 9.8 CRITICAL
Network 		jsrsasign_project
netapp 		jsrsasign
max_data 		An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipulation/modification by prepending '\0' bytes to a s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-14968 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209525 9.8 CRITICAL
Network 		jsrsasign_project
netapp 		jsrsasign
max_data 		An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending '\0' bytes to ciphertext… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-14967 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209526 7.5 HIGH
Network 		jsrsasign_project
netapp 		jsrsasign
max_data 		An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows in the length of a sequence and '0' characters appe… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-14966 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209527 5.4 MEDIUM
Network 		machothemes image_photo_gallery_final_tiles_grid Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title (aka imageTitle) or Caption (aka… CWE-79
Cross-site Scripting 		CVE-2020-14962 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209528 5.3 MEDIUM
Network 		concretecms concrete_cms Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value. NVD-CWE-noinfo
CVE-2020-14961 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209529 7.2 HIGH
Network 		php-fusion php-fusion A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter, CWE-89
SQL Injection 		CVE-2020-14960 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209530 5.4 MEDIUM
Network 		goldplugins easy_testimonials Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, We… CWE-79
Cross-site Scripting 		CVE-2020-14959 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm