Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230531 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3420 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230532 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/user.pl における脆弱性 - CVE-2007-3419 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230533 6.5 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/forum_display.pl における他のユーザになりすまされる脆弱性 - CVE-2007-3418 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230534 4.3 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3417 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230535 5 警告 web-app.org
web-app.net
- web-app.org WebAPP などのプロフィールなどの管理におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-3416 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230536 7.5 危険 phpraider - phpRaider の index.php における SQL インジェクションの脆弱性 - CVE-2007-3415 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230537 5 警告 sergey lyubka - Sergey Lyubka Simple HTTPD における重要な情報を取得される脆弱性 - CVE-2007-3407 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230538 5 警告 sitedepth - SiteDepth CMS の ShowImage.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3404 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230539 7.5 危険 phpee - PPhlogger の include/get_userdata.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3399 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
230540 2.1 注意 レッドハット - x86_64 プラットフォーム上で稼動している RHEL のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-3379 2012-12-20 18:19 2007-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213411 6.5 MEDIUM
Network
freerdp
opensuse
debian
freerdp
leap
debian_linux
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str… - CVE-2020-11019 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
213412 6.5 MEDIUM
Network
freerdp
opensuse
debian
freerdp
leap
debian_linux
In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T… - CVE-2020-11018 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
213413 6.5 MEDIUM
Network
freerdp
opensuse
debian
freerdp
leap
debian_linux
In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0. - CVE-2020-11017 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
213414 6.1 MEDIUM
Network
kaminari_project
debian
kaminari
debian_linux
In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. - CVE-2020-11082 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
213415 9.8 CRITICAL
Network
node-dns-sync_project node-dns-sync node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt… CWE-77
Command Injection
CVE-2020-11079 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
213416 9.9 CRITICAL
Network
anchore engine In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima… NVD-CWE-Other
CVE-2020-11075 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
213417 7.5 HIGH
Network
aegir_project aegir In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i… CWE-200
Information Exposure
CVE-2020-11059 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
213418 7.8 HIGH
Local
sympa
fedoraproject
debian
canonical
sympa
fedora
debian_linux
ubuntu_linux
Sympa before 6.2.56 allows privilege escalation. CWE-269
 Improper Privilege Management
CVE-2020-10936 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
213419 6.1 MEDIUM
Network
centreon centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers… CWE-79
Cross-site Scripting
CVE-2020-10946 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
213420 4.3 MEDIUM
Adjacent
centreon widget-host-monitoring
centreon
Centreon before 19.10.7 exposes Session IDs in server responses. CWE-200
Information Exposure
CVE-2020-10945 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm