Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229431	6.8	警告	Telaxus LLC	-	epesi framework における任意の PHP コードを実行される脆弱性	-	CVE-2007-4026	2012-12-20 18:33	2007-07-26	Show	GitHub Exploit DB Packet Storm

229432	4.3	警告	サン・マイクロシステムズ	-	Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性	-	CVE-2007-4025	2012-12-20 18:33	2007-07-24	Show	GitHub Exploit DB Packet Storm

229433	4.3	警告	w1l3d4	-	W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4024	2012-12-20 18:33	2007-07-26	Show	GitHub Exploit DB Packet Storm

229434	4.3	警告	WordPress.org	-	WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4014	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229435	6.8	警告	virtual hosting control system	-	VHCS におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2007-3988	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229436	5	警告	securecomputing	-	Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性	-	CVE-2007-3986	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229437	5	警告	securecomputing	-	SecurityReporter の file.cgi におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-3985	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229438	7.5	危険	zenturi	-	sasatl.dll の NixonMyPrograms クラスにおけるバッファオーバーフローの脆弱性	-	CVE-2007-3984	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229439	7.5	危険	wsnlinks	-	WSN Links Basic Edition の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3981	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

229440	10	危険	rcms pro	-	RCMS Pro RGameScript Pro の page.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3980	2012-12-20 18:33	2007-07-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196621	7.5	HIGH Network	servey_project	servey	A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.	CWE-22 Path Traversal	CVE-2020-8214	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

196622	8.8	HIGH Network	automattic	canvas	A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.	CWE-120 Classic Buffer Overflow	CVE-2020-8215	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

196623	7.5	HIGH Network	transloadit	uppy	The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8205	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

196624	9.8	CRITICAL Network	jison_project	jison	Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.	CWE-78 OS Command	CVE-2020-8178	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

196625	7.4	HIGH Network	lodash oracle	lodash peoplesoft_enterprise_peopletools communications_billing_and_revenue_management enterprise_communications_broker banking_extensibility_workbench banking_virtual_account_manageme…	Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-8203	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

196626	7.8	HIGH Local	citrix	gateway_plug-in_for_linux	Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root.	NVD-CWE-noinfo	CVE-2020-8199	2024-11-21 14:38	2020-07-11	Show	GitHub Exploit DB Packet Storm

196627	6.1	MEDIUM Network	citrix	application_delivery_controller_firmware netscaler_gateway_firmware gateway_firmware sd-wan_wanop	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1…	CWE-79 Cross-site Scripting	CVE-2020-8198	2024-11-21 14:38	2020-07-11	Show	GitHub Exploit DB Packet Storm

196628	8.8	HIGH Network	citrix	application_delivery_controller_firmware netscaler_gateway_firmware gateway_firmware	Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access t…	NVD-CWE-noinfo	CVE-2020-8197	2024-11-21 14:38	2020-07-11	Show	GitHub Exploit DB Packet Storm

196629	4.3	MEDIUM Network	citrix	application_delivery_controller_firmware netscaler_gateway_firmware gateway_firmware sd-wan_wanop	Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.…	CWE-287 Improper Authentication	CVE-2020-8196	2024-11-21 14:38	2020-07-11	Show	GitHub Exploit DB Packet Storm

196630	6.5	MEDIUM Network	citrix	application_delivery_controller_firmware netscaler_gateway_firmware gateway_firmware sd-wan_wanop gateway_plug-in_for_linux	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 1…	CWE-22 Path Traversal	CVE-2020-8195	2024-11-21 14:38	2020-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed