Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230631	10	危険	runcms	-	RunCms の newbb_plus における脆弱性	CWE-noinfo 情報不足	CVE-2007-5535	2012-12-20 18:33	2007-10-17	Show	GitHub Exploit DB Packet Storm

230632	4.6	警告	sitebar	-	SiteBar の translator.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5492	2012-12-20 18:33	2007-10-17	Show	GitHub Exploit DB Packet Storm

230633	9	危険	sitebar	-	SiteBar の translator.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5491	2012-12-20 18:33	2007-10-17	Show	GitHub Exploit DB Packet Storm

230634	5	警告	wwwisis	-	WWWISIS の wxis.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5484	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

230635	6.4	警告	サン・マイクロシステムズ	-	Sun StorEdge/StorageTek 3510 FC Array の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-5482	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

230636	4.3	警告	xcomputer	-	Xcomputer の Search.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5479	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

230637	4.3	警告	valve software	-	WebMod Half-Life Dedicated Server プラグインの auth.w におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5477	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

230638	7.8	危険	SUSE	-	SUSE Linux Enterprise Server の ISC BIND named デーモンで使用される libgssapi におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2007-5471	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

230639	5	警告	viart	-	ViArt Shop の iDEAL payment モジュールにおける証明書および鍵ファイルのパス名を取得される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5463	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

230640	4.3	警告	wwwisis	-	WWWISIS の wxis.exe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5455	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210231	6.1	MEDIUM Network	usvn	user-friendly_svn	USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.	CWE-79 Cross-site Scripting	CVE-2020-17364	2024-11-21 14:07	2020-08-6	Show	GitHub Exploit DB Packet Storm

210232	9.8	CRITICAL Network	lilypond fedoraproject debian opensuse	lilypond fedora debian_linux leap backports_sle	scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous …	NVD-CWE-noinfo	CVE-2020-17353	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

210233	8.1	HIGH Network	pghero_project	pghero	The PgHero gem through 2.6.0 for Ruby allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-16253	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

210234	4.3	MEDIUM Network	field_test_project	field_test	The Field Test gem 0.2.0 through 0.3.2 for Ruby allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-16252	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

210235	6.1	MEDIUM Network	extremenetworks	extreme_management_center	Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.	CWE-79 Cross-site Scripting	CVE-2020-16847	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

210236	5.9	MEDIUM Network	amazon	firecracker	In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured wit…	NVD-CWE-noinfo	CVE-2020-16843	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

210237	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database vi…	CWE-20 Improper Input Validation	CVE-2020-16272	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

210238	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket …	CWE-330 Use of Insufficiently Random Values	CVE-2020-16271	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

210239	5.5	MEDIUM Local	radare fedoraproject	radare2 fedora	radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.	NVD-CWE-noinfo	CVE-2020-16269	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

210240	8.8	HIGH Network	mozilla	thunderbird	During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.	CWE-77 Command Injection	CVE-2020-15685	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed