Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229221 7.5 危険 phpcentral - PHPCentral Login の include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4342 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229222 7.5 危険 phpdvd - phpDVD の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4340 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229223 7.5 危険 phpcentral - PHPCentral Poll Script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4339 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229224 5.8 警告 streamripper - Streamripper の lib/http.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4337 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229225 5 警告 qbik - Qbik WinGate の SMTP サーバコンポーネントにおけるフォーマットストリングの脆弱性 - CVE-2007-4335 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229226 4.3 警告 php-stats - Php-stats の whois.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4334 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
229227 4 警告 ZyXEL - Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4319 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
229228 4.3 警告 ZyXEL - Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4318 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
229229 4.3 警告 ZyXEL - Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4317 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
229230 4.3 警告 ZyXEL - Zyxel Zywall 2 上で稼動する ZyNOS の管理インターフェースにおける管理アクションを実行される脆弱性 - CVE-2007-4316 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196441 6.1 MEDIUM
Local 		linux
debian
opensuse 		linux_kernel
debian_linux
leap 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. CWE-416
 Use After Free 		CVE-2020-8647 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
196442 8.8 HIGH
Network 		lotus_core_cms_project lotus_core_cms Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter. CWE-22
Path Traversal 		CVE-2020-8641 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
196443 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. CWE-521
Weak Password Requirements  		CVE-2020-8632 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
196444 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice funct… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-8631 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
196445 6.5 MEDIUM
Network 		themeum tutor_lms A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legiti… CWE-352
 Origin Validation Error 		CVE-2020-8615 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
196446 9.8 CRITICAL
Network 		point-to-point_protocol_project
wago
debian
canonical 		point-to-point_protocol
pfc_firmware
debian_linux
ubuntu_linux 		eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. CWE-120
Classic Buffer Overflow 		CVE-2020-8597 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm
196447 9.8 CRITICAL
Network 		eginnovations eg_manager eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature). CWE-89
SQL Injection 		CVE-2020-8592 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm
196448 9.8 CRITICAL
Network 		eginnovations eg_manager eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request. CWE-287
Improper Authentication 		CVE-2020-8591 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm
196449 6.1 MEDIUM
Network 		wpchill strong_testimonials Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens. CWE-79
Cross-site Scripting 		CVE-2020-8549 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm
196450 6.1 MEDIUM
Network 		masscode masscode massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true). CWE-79
Cross-site Scripting 		CVE-2020-8548 2024-11-21 14:39 2020-02-4 Show GitHub Exploit DB Packet Storm