Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 13, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230231 | 7.5 | 危険 | BitTorrent, Inc. | - | uTorrent におけるヒープベースのバッファオーバーフローの脆弱性 | - | CVE-2007-0927 | 2012-12-20 18:19 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 230232 | 7.5 | 危険 | till gerken | - | Till Gerken phpPolls における認証を回避される脆弱性 | - | CVE-2007-0924 | 2012-12-20 18:19 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 230233 | 7.8 | 危険 | radical technologies | - | Portal Search の buscador/buscador.htm における重要な情報を取得される脆弱性 | - | CVE-2007-0923 | 2012-12-20 18:19 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 230234 | 4.3 | 警告 | radical technologies | - | Portal Search の buscador/buscador.htm におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-0922 | 2012-12-20 18:19 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 230235 | 9.4 | 危険 | radical technologies | - | Portal Search における任意の Web サイトへの URL をリダイレクトされる脆弱性 | - | CVE-2007-0921 | 2012-12-20 18:19 | 2007-02-14 | Show | GitHub Exploit DB Packet Storm |
| 230236 | 10 | 危険 | ProcessOne | - | ejabberd の mod_roster_odbc モジュールにおける脆弱性 | - | CVE-2007-0903 | 2012-12-20 18:19 | 2007-02-2 | Show | GitHub Exploit DB Packet Storm |
| 230237 | 7.5 | 危険 | tagit | - | TagIt! Tagboard における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-0900 | 2012-12-20 18:19 | 2007-02-13 | Show | GitHub Exploit DB Packet Storm |
| 230238 | 2.6 | 注意 | サン・マイクロシステムズ | - | Solaris の rm の -r および -R オプションを伴うディレクトリの再帰的削除における rm を稼働しているユーザとしてファイルなどを削除される脆弱性 | - | CVE-2007-0895 | 2012-12-20 18:19 | 2007-02-8 | Show | GitHub Exploit DB Packet Storm |
| 230239 | 6.8 | 警告 | rainbow portal | - | sRainbow の jira/secure/BrowseProject.jspa におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-0885 | 2012-12-20 18:19 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 230240 | 7.5 | 危険 | Roaring Penguin Software Inc. | - | Roaring Penguin MIMEDefang におけるバッファオーバーフローの脆弱性 | - | CVE-2007-0884 | 2012-12-20 18:19 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 14, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210631 | 6.5 |
MEDIUM
Network |
gnome canonical fedoraproject netapp broadcom |
balsa glib-networking ubuntu_linux fedora cloud_backup fabric_operating_system |
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server… |
CWE-295
Improper Certificate Validation |
CVE-2020-13645 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210632 | 5.4 |
MEDIUM
Network |
pickplugins | accordion | An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… |
CWE-79
Cross-site Scripting |
CVE-2020-13644 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210633 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … |
CWE-352
Origin Validation Error |
CVE-2020-13643 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210634 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… |
CWE-352
Origin Validation Error |
CVE-2020-13642 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210635 | 8.8 |
HIGH
Network |
infolific | real-time_find_and_replace | An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on beh… |
CWE-352
Origin Validation Error |
CVE-2020-13641 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210636 | 6.1 |
MEDIUM
Network |
fork-cms | fork_cms | Fork before 5.8.3 allows XSS via navigation_title or title. |
CWE-79
Cross-site Scripting |
CVE-2020-13633 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210637 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in v… |
CWE-79
Cross-site Scripting |
CVE-2020-13628 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210638 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in … |
CWE-79
Cross-site Scripting |
CVE-2020-13627 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210639 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade debian siemens oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware debian_linux sinec_infrastructu… |
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. |
CWE-476
NULL Pointer Dereference |
CVE-2020-13632 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 210640 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade siemens apple oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware sinec_infrastructure_network_servi… |
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. |
NVD-CWE-noinfo
|
CVE-2020-13631 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |