Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229701	6.5	警告	stephen craton	-	Stephen Craton Chatness の admin/save.php における .html ファイルへ PHP コードを挿入される脆弱性	-	CVE-2007-2148	2012-12-20 18:19	2007-04-19	Show	GitHub Exploit DB Packet Storm

229702	7.5	危険	sitebar	-	Sitebar における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2088	2012-12-20 18:19	2007-04-18	Show	GitHub Exploit DB Packet Storm

229703	6.9	警告	zonelabs	-	Check Point Zone Labs ZoneAlarm の vsdatant.sys におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2083	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229704	7.5	危険	xampp	-	Windows 用の XAMPP における SQL インジェクションの脆弱性	-	CVE-2007-2080	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229705	9.3	危険	xampp	-	Windows 用の XAMPP におけるバッファオーバーフローの脆弱性	-	CVE-2007-2079	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229706	6.9	警告	scramdisk 4 linux	-	ScramDisk 4 Linux における権限を取得される脆弱性	-	CVE-2007-2075	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229707	4.6	警告	scramdisk 4 linux	-	ScramDisk 4 Linux のコンテナ内の特定のプログラムにおける権限を取得される脆弱性	-	CVE-2007-2074	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229708	7.5	危険	turnkey web tools	-	Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2070	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229709	6.8	警告	storefront for gallery	-	Gallery の StoreFront mods における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2068	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

229710	7.5	危険	webslider	-	Marco Antonio Islas Cruz WebSlider における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2067	2012-12-20 18:19	2007-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200161	7.5	HIGH Network	leptonica debian fedoraproject	leptonica debian_linux fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.	CWE-125 Out-of-bounds Read	CVE-2020-36281	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

200162	7.5	HIGH Network	leptonica fedoraproject	leptonica fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.	CWE-125 Out-of-bounds Read	CVE-2020-36280	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

200163	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.	CWE-125 Out-of-bounds Read	CVE-2020-36279	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

200164	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.	CWE-125 Out-of-bounds Read	CVE-2020-36278	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

200165	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-36277	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

200166	7.5	HIGH Network	identitymodel_project	identitymodel	An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.	NVD-CWE-noinfo	CVE-2020-36255	2024-11-21 14:29	2021-03-5	Show	GitHub Exploit DB Packet Storm

200167	5.3	MEDIUM Network	atlassian	crowd	The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d…	NVD-CWE-noinfo	CVE-2020-36240	2024-11-21 14:29	2021-03-2	Show	GitHub Exploit DB Packet Storm

200168	8.1	HIGH Network	dropbear_ssh_project	dropbear_ssh	scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.	NVD-CWE-noinfo	CVE-2020-36254	2024-11-21 14:29	2021-02-25	Show	GitHub Exploit DB Packet Storm

200169	5.0	MEDIUM Network	atlassian	atlassian-gadgets	The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36232	2024-11-21 14:29	2021-02-23	Show	GitHub Exploit DB Packet Storm

200170	4.6	MEDIUM Physics	owncloud	owncloud	The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-36248	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed