Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229611	7.5	危険	XOOPS	-	Xoops 用の MyConference モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-2737	2012-12-20 18:19	2007-05-17	Show	GitHub Exploit DB Packet Storm

229612	7.5	危険	touteresa	-	Xoops 用の ResManager モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-2735	2012-12-20 18:19	2007-05-17	Show	GitHub Exploit DB Packet Storm

229613	10	危険	snaps gallery	-	Snaps! Gallery の Admin/users.php における任意のユーザ名を変更される脆弱性	-	CVE-2007-2715	2012-12-20 18:19	2007-05-16	Show	GitHub Exploit DB Packet Storm

229614	10	危険	tinyirc	-	TinyIdentD におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-2711	2012-12-20 18:19	2007-05-16	Show	GitHub Exploit DB Packet Storm

229615	6.8	警告	simple php scripts gallery	-	sphp の Ivan Peevski gallery における任意の PHP コードを実行される脆弱性	-	CVE-2007-2679	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

229616	7.5	危険	phpchess	-	phpChess Community Edition における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2677	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

229617	7.5	危険	PreProject.com	-	Pre Classifieds Listings の search.php における SQL インジェクションの脆弱性	-	CVE-2007-2675	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

229618	7.5	危険	PreProject.com	-	Pre Shopping Mall の detail.php における SQL インジェクションの脆弱性	-	CVE-2007-2674	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

229619	7.5	危険	thinc4orce marketing group	-	PHP Coupon Script の index.php における SQL インジェクションの脆弱性	-	CVE-2007-2672	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

229620	6.8	警告	webdesproxy	-	webdesproxy におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2668	2012-12-20 18:19	2007-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200511	7.5	HIGH Network	php fedoraproject debian drupal	archive_tar fedora debian_linux drupal	Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.	CWE-22 CWE-59 Path Traversal Link Following	CVE-2020-36193	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

200512	7.7	HIGH Network	presstigers	simple_board_job	Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files …	CWE-22 Path Traversal	CVE-2020-35749	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

200513	5.4	MEDIUM Network	foliovision	fv_flowplayer_video_player	Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2020-35748	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

200514	5.3	MEDIUM Network	mantisbt	source_integration	An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private …	NVD-CWE-noinfo	CVE-2020-36192	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

200515	4.5	MEDIUM Network	jupyter	jupyterhub	JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).	CWE-352 Origin Validation Error	CVE-2020-36191	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

200516	6.1	MEDIUM Network	rails_admin_project	rails_admin	RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.	CWE-79 Cross-site Scripting	CVE-2020-36190	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

200517	7.5	HIGH Network	socket	socket.io-parser	socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-36049	2024-11-21 14:28	2021-01-8	Show	GitHub Exploit DB Packet Storm

200518	7.5	HIGH Network	socket	engine.io	Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-36048	2024-11-21 14:28	2021-01-8	Show	GitHub Exploit DB Packet Storm

200519	8.1	HIGH Network	fasterxml netapp debian oracle	jackson-databind cloud_backup service_level_manager debian_linux webcenter_portal primavera_unifier application_testing_suite agile_plm communications_policy_management com…	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.	CWE-502 Deserialization of Untrusted Data	CVE-2020-36183	2024-11-21 14:28	2021-01-7	Show	GitHub Exploit DB Packet Storm

200520	8.1	HIGH Network	fasterxml netapp debian oracle	jackson-databind cloud_backup service_level_manager debian_linux webcenter_portal primavera_unifier application_testing_suite agile_plm communications_policy_management com…	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.	CWE-502 Deserialization of Untrusted Data	CVE-2020-36182	2024-11-21 14:28	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed