Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230311	5	警告	wengo	-	WengoPhone におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4366	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230312	6.8	警告	prozilla	-	Prozilla Webring の category.php における SQL インジェクションの脆弱性	-	CVE-2007-4362	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230313	6.8	警告	skilmatch staffing systems	-	SkilMatch Staffing Systems JobLister3 における SQL インジェクションの脆弱性	-	CVE-2007-4359	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230314	4.3	警告	zoidcom	-	Zoidcom におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4358	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

230315	7.5	危険	phpcentral	-	PHPCentral Login の include.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4342	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230316	7.5	危険	phpdvd	-	phpDVD の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-4340	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230317	7.5	危険	phpcentral	-	PHPCentral Poll Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4339	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230318	5.8	警告	streamripper	-	Streamripper の lib/http.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4337	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230319	5	警告	qbik	-	Qbik WinGate の SMTP サーバコンポーネントにおけるフォーマットストリングの脆弱性	-	CVE-2007-4335	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

230320	4.3	警告	php-stats	-	Php-stats の whois.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4334	2012-12-20 18:33	2007-08-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197161	9.1	CRITICAL Network	lua-openssl_project	lua-openssl	openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.	CWE-295 Improper Certificate Validation	CVE-2020-9432	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197162	7.5	HIGH Network	wireshark opensuse fedoraproject debian	wireshark leap fedora debian_linux	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operation…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-9431	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197163	7.5	HIGH Network	wireshark fedoraproject opensuse debian	wireshark fedora leap debian_linux	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.	CWE-20 Improper Input Validation	CVE-2020-9430	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197164	7.5	HIGH Network	wireshark opensuse	wireshark leap	In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a…	CWE-476 NULL Pointer Dereference	CVE-2020-9429	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197165	7.5	HIGH Network	wireshark debian fedoraproject opensuse	wireshark debian_linux fedora leap	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.	CWE-125 Out-of-bounds Read	CVE-2020-9428	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197166	7.5	HIGH Network	pureftpd debian fedoraproject canonical	pure-ftpd debian_linux fedora extra_packages_for_enterprise_linux ubuntu_linux	An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) fu…	CWE-824 Access of Uninitialized Pointer	CVE-2020-9274	2024-11-21 14:40	2020-02-27	Show	GitHub Exploit DB Packet Storm

197167	6.5	MEDIUM Network	golfbuddyglobal	course_manager	In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.	CWE-200 CWE-326 Information Exposure Inadequate Encryption Strength	CVE-2020-9337	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197168	5.3	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-9407	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197169	9.8	CRITICAL Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.	CWE-94 Code Injection	CVE-2020-9406	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197170	6.1	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.	CWE-79 Cross-site Scripting	CVE-2020-9405	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed