Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229621	7.5	危険	virtualsystem	-	VS-Link-Partner の inc/functions_inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1025	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229622	7.5	危険	Snitz	-	Snitz Forums 2000 の pop_profile.asp における SQL インジェクションの脆弱性	-	CVE-2007-1023	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229623	7.5	危険	turuncu portal	-	Turuncu Portal の h_goster.asp における SQL インジェクションの脆弱性	-	CVE-2007-1022	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229624	10	危険	xfairguy	-	CodeAvalanche News の inc_listnews.asp における SQL インジェクションの脆弱性	-	CVE-2007-1021	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229625	6.8	警告	webSPELL	-	webSPELL の news.php における SQL インジェクションの脆弱性	-	CVE-2007-1019	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229626	9.3	危険	virtualsystem	-	VirtualSystem VS-News-System の tpl/header.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1018	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229627	9.3	危険	virtualsystem	-	VirtualSystem VS-News-System の show_news_inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1017	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229628	10	危険	vicftps	-	VicFTPS におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-1014	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229629	10	危険	virtualsystem	-	VirtualSystem Htaccess Passwort Generator の generate.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1013	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

229630	7.5	危険	vs-gastebuch	-	VS-Gastebuch の functions_inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1011	2012-12-20 18:19	2007-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210471	9.8	CRITICAL Network	nanometrics	titansma centaur	Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2020-12134	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210472	6.1	MEDIUM Network	fifthplay	s.a.m.i	Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request.	CWE-79 Cross-site Scripting	CVE-2020-12132	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210473	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo).	CWE-79 Cross-site Scripting	CVE-2020-12131	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210474	5.3	MEDIUM Network	postfix	postfix	A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homoglyph attack, as demonstrated by the similarity of \xce\xbf to the 'o' character…	NVD-CWE-Other	CVE-2020-12063	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210475	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.	CWE-79 Cross-site Scripting	CVE-2020-12130	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210476	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function.	CWE-79 Cross-site Scripting	CVE-2020-12129	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210477	7.5	HIGH Network	file_transfer_ifamily_project	file_transfer_ifamily	DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path.	CWE-22 Path Traversal	CVE-2020-12128	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210478	8.2	HIGH Network	binance	tss-lib	The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information fro…	CWE-276 Incorrect Default Permissions	CVE-2020-12118	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210479	6.1	MEDIUM Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.	CWE-79 Cross-site Scripting	CVE-2020-12113	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

210480	7.5	HIGH Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.	CWE-22 Path Traversal	CVE-2020-12112	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm