Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230171	7.5	危険	uberghey	-	Uberghey CMS の frontpage.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0359	2012-12-20 18:19	2007-01-18	Show	GitHub Exploit DB Packet Storm

230172	6.2	警告	zonelabs	-	Microsoft Windows XP および Windows Server 2003 における権限を取得される脆弱性	-	CVE-2007-0351	2012-12-20 18:19	2007-01-18	Show	GitHub Exploit DB Packet Storm

230173	7.5	危険	sme	-	SmE FileMailer の index.php および dl.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-0350	2012-12-20 18:19	2007-01-18	Show	GitHub Exploit DB Packet Storm

230174	7.5	危険	sme	-	SmE FileMailer の index.php における SQL インジェクションの脆弱性	-	CVE-2007-0346	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230175	6.8	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-0341	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230176	7.5	危険	thwboard	-	ThWboard の inc/header.inc.php における SQL インジェクションの脆弱性	-	CVE-2007-0340	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230177	7.5	危険	scriptme	-	Scriptme SMe FileMailer の index.php における SQL インジェクションの脆弱性	-	CVE-2007-0339	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230178	4.4	警告	rixstep	-	Rixstep Undercover の Undercover.app/Contents/Resources/uc における任意のファイルを上書きされる脆弱性	-	CVE-2007-0336	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230179	7.5	危険	xentraz	-	liens_dynamiques の admin/adminlien.php3 などにおける許可されていない管理者の操作を実行される脆弱性	-	CVE-2007-0332	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

230180	6.8	警告	xentraz	-	liens_dynamiques の liens.php3 におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-0331	2012-12-20 18:19	2007-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199791	7.5	HIGH Network	konghq	multipart	A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads t…	-	CVE-2020-36661	2024-11-21 14:30	2023-02-13	Show	GitHub Exploit DB Packet Storm

199792	8.1	HIGH Network	lemonldap-ng debian	apache\ debian_linux	In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS m…	CWE-295 Improper Certificate Validation	CVE-2020-36659	2024-11-21 14:30	2023-01-27	Show	GitHub Exploit DB Packet Storm

199793	8.1	HIGH Network	lemonldap-ng debian	apache\ debian_linux	In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module fo…	CWE-295 Improper Certificate Validation	CVE-2020-36658	2024-11-21 14:30	2023-01-27	Show	GitHub Exploit DB Packet Storm

199794	7.8	HIGH Local	uptimed_project	uptimed	uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there i…	NVD-CWE-noinfo	CVE-2020-36657	2024-11-21 14:30	2023-01-27	Show	GitHub Exploit DB Packet Storm

199795	8.8	HIGH Network	yiiframework	gii	Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file.	CWE-94 Code Injection	CVE-2020-36655	2024-11-21 14:30	2023-01-21	Show	GitHub Exploit DB Packet Storm

199796	6.1	MEDIUM Network	geni	geni-portal	A vulnerability classified as problematic has been found in GENI Portal. This affects the function no_invocation_id_error of the file portal/www/portal/sliceresource.php. The manipulation of the argu…	CWE-79 Cross-site Scripting	CVE-2020-36654	2024-11-21 14:30	2023-01-18	Show	GitHub Exploit DB Packet Storm

199797	7.5	HIGH Network	nodeserver_project	nodeserver	A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is an unknown functionality of the file nodeserver.js. The manipulation leads to p…	CWE-22 Path Traversal	CVE-2020-36651	2024-11-21 14:30	2023-01-18	Show	GitHub Exploit DB Packet Storm

199798	8.0	HIGH Adjacent	gry_project	gry	A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 i…	CWE-77 Command Injection	CVE-2020-36650	2024-11-21 14:30	2023-01-12	Show	GitHub Exploit DB Packet Storm

199799	7.5	HIGH Network	papaparse	papaparse	A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regula…	-	CVE-2020-36649	2024-11-21 14:30	2023-01-12	Show	GitHub Exploit DB Packet Storm

199800	9.8	CRITICAL Network	pouet	pouet2.0	A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The identifier of th…	CWE-89 SQL Injection	CVE-2020-36648	2024-11-21 14:30	2023-01-8	Show	GitHub Exploit DB Packet Storm