Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230121 6.8 警告 XOOPS - XOOPS 用の Cjay Content モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3220 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230122 7.5 危険 prototype of an php application - PHP アプリケーションの Prototype における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3217 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230123 6.8 警告 PHPMailer project - PHPMailer における任意のシェルコマンドを実行される脆弱性 - CVE-2007-3215 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
230124 10 危険 PhpWiki - PhpWiki の lib/WikiUser/LDAP.php における認証を回避される脆弱性 - CVE-2007-3193 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
230125 6.8 警告 vincent hor - Calendarix における SQL インジェクションの脆弱性 - CVE-2007-3183 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230126 4.3 警告 vincent hor - Calendarix におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3182 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230127 7.5 危険 zindizayn okul web sistemi - Zindizayn Okul Web Sistemi における SQL インジェクションの脆弱性 - CVE-2007-3178 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
230128 7.5 危険 w2b - W2B Online Banking における SQL インジェクションの脆弱性 - CVE-2007-3175 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
230129 4.3 警告 w2b - W2B Online Banking の auth.w2b におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3174 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
230130 5 警告 uebimiau - Uebimiau Webmail の demo/pop3/error.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3172 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197021 7.5 HIGH
Network 		wireshark
opensuse 		wireshark
leap 		In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a… CWE-476
 NULL Pointer Dereference 		CVE-2020-9429 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197022 7.5 HIGH
Network 		wireshark
debian
fedoraproject
opensuse 		wireshark
debian_linux
fedora
leap 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing. CWE-125
Out-of-bounds Read 		CVE-2020-9428 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197023 7.5 HIGH
Network 		pureftpd
debian
fedoraproject
canonical 		pure-ftpd
debian_linux
fedora
extra_packages_for_enterprise_linux
ubuntu_linux 		An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) fu… CWE-824
 Access of Uninitialized Pointer 		CVE-2020-9274 2024-11-21 14:40 2020-02-27 Show GitHub Exploit DB Packet Storm
197024 6.5 MEDIUM
Network 		golfbuddyglobal course_manager In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request. CWE-200
CWE-326
Information Exposure
Inadequate Encryption Strength 		CVE-2020-9337 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197025 5.3 MEDIUM
Network 		iblsoft online_weather IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-9407 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197026 9.8 CRITICAL
Network 		iblsoft online_weather IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. CWE-94
Code Injection 		CVE-2020-9406 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197027 6.1 MEDIUM
Network 		iblsoft online_weather IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. CWE-79
Cross-site Scripting 		CVE-2020-9405 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197028 9.8 CRITICAL
Network 		ispconfig ispconfig ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection. CWE-89
SQL Injection 		CVE-2020-9398 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197029 8.8 HIGH
Network 		supsystic pricing_table_by_supsystic An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF. CWE-352
 Origin Validation Error 		CVE-2020-9394 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197030 6.1 MEDIUM
Network 		supsystic pricing_table_by_supsystic An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-9393 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm