Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229041 4.3 警告 techexcel inc. - TechExcel CustomerWise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4882 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
229042 7.5 危険 psi-labs - psisns の profile/myprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4881 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
229043 5 警告 Simplenews Project - SimpNews における任意の .inc ファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4873 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
229044 5 警告 Simplenews Project - SimpleNews における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2007-4872 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
229045 6.8 警告 Quirm - SAXON の example.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4863 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
229046 4.3 警告 Quirm - SAXON の admin/menu.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4862 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
229047 5 警告 Quirm - SAXON における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-4861 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
229048 7.5 危険 webace - wls の start.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4846 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
229049 7.5 危険 rwscripts.com - RW::Download の UPLOAD/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4845 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
229050 4.3 警告 x-diesel - X-Diesel Unreal Commander におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4844 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200851 7.2 HIGH
Network 		batflat batflat Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To exploit this, one must login to the … CWE-94
Code Injection 		CVE-2020-35734 2024-11-21 14:27 2021-02-16 Show GitHub Exploit DB Packet Storm
200852 7.8 HIGH
Local 		freedesktop dbus A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharin… CWE-416
 Use After Free 		CVE-2020-35512 2024-11-21 14:27 2021-02-16 Show GitHub Exploit DB Packet Storm
200853 7.5 HIGH
Network 		openvswitch
debian
fedoraproject 		openvswitch
debian_linux
fedora 		A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow i… - CVE-2020-35498 2024-11-21 14:27 2021-02-12 Show GitHub Exploit DB Packet Storm
200854 6.1 MEDIUM
Network 		adminer adminer Adminer through 4.7.8 allows XSS via the history parameter to the default URI. CWE-79
Cross-site Scripting 		CVE-2020-35572 2024-11-21 14:27 2021-02-10 Show GitHub Exploit DB Packet Storm
200855 8.8 HIGH
Network 		librenms librenms A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL … CWE-89
SQL Injection 		CVE-2020-35700 2024-11-21 14:27 2021-02-8 Show GitHub Exploit DB Packet Storm
200856 7.5 HIGH
Network 		jetbrains teamcity JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-35667 2024-11-21 14:27 2021-02-4 Show GitHub Exploit DB Packet Storm
200857 5.4 MEDIUM
Network 		solarwinds serv-u SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. CWE-79
Cross-site Scripting 		CVE-2020-35482 2024-11-21 14:27 2021-02-4 Show GitHub Exploit DB Packet Storm
200858 9.8 CRITICAL
Network 		solarwinds serv-u SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection. NVD-CWE-Other
CVE-2020-35481 2024-11-21 14:27 2021-02-4 Show GitHub Exploit DB Packet Storm
200859 6.5 MEDIUM
Network 		digium asterisk An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message… NVD-CWE-noinfo
CVE-2020-35652 2024-11-21 14:27 2021-01-29 Show GitHub Exploit DB Packet Storm
200860 9.1 CRITICAL
Network 		mitel micollab A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) to user data. NVD-CWE-noinfo
CVE-2020-35547 2024-11-21 14:27 2021-01-29 Show GitHub Exploit DB Packet Storm