Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229821 6.8 警告 ruben boelinger - WordPress 用の wordTube プラグインの wordtube-button.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2481 2012-12-20 18:19 2007-05-3 Show GitHub Exploit DB Packet Storm
229822 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2474 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229823 4.3 警告 sendcard - Sendcard の sendcard.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2472 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229824 5 警告 sendcard - Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2471 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229825 4.9 警告 zonelabs - ZoneAlarm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2467 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229826 7.8 危険 サン・マイクロシステムズ - Sun Java System Directory Server および Sun ONE Directory Server で使用されている C 用の LDAP SDK におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2466 2012-12-20 18:19 2007-05-1 Show GitHub Exploit DB Packet Storm
229827 7.8 危険 tony cook - Imager perl モジュールの BMP リーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2459 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229828 7.5 危険 pixaria - Pixaria Gallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2458 2012-12-20 18:19 2007-04-15 Show GitHub Exploit DB Packet Storm
229829 7.5 危険 pixaria - Pixaria Gallery の resources/includes/class.Smarty.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2457 2012-12-20 18:19 2007-04-15 Show GitHub Exploit DB Packet Storm
229830 2.1 注意 CollabNet, Inc. - Subversion における重要な情報 (プロパティの改定) を取得される脆弱性 - CVE-2007-2448 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210291 6.1 MEDIUM
Network 		drupal entity_embed The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is ac… CWE-79
Cross-site Scripting 		CVE-2020-13673 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210292 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions pr… CWE-79
Cross-site Scripting 		CVE-2020-13672 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210293 7.5 HIGH
Network 		drupal drupal Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the I… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-13670 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210294 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.… CWE-79
Cross-site Scripting 		CVE-2020-13669 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210295 6.1 MEDIUM
Network 		drupal drupal Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8… CWE-79
Cross-site Scripting 		CVE-2020-13668 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210296 6.1 MEDIUM
Network 		outsystems lifetime_management_console
platform_server
outsystems 		A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store m… CWE-79
Cross-site Scripting 		CVE-2020-13639 2024-11-21 14:01 2021-08-31 Show GitHub Exploit DB Packet Storm
210297 8.8 HIGH
Network 		rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit … CWE-89
SQL Injection 		CVE-2020-13589 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
210298 8.8 HIGH
Network 		rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerabl… CWE-89
SQL Injection 		CVE-2020-13588 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
210299 8.8 HIGH
Network 		drupal drupal Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities. CWE-352
 Origin Validation Error 		CVE-2020-13663 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm
210300 6.1 MEDIUM
Network 		drupal drupal Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupa… CWE-79
Cross-site Scripting 		CVE-2020-13688 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm