Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230671 6 警告 迅雷 - Xunlei Thunder の pplayer.dll_1_work におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6144 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
230672 7.5 危険 vu - VU Case Manager の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6143 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
230673 4.3 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6142 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
230674 4.3 警告 vbtube - vBTube の vBTube.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6141 2012-12-20 18:34 2007-11-27 Show GitHub Exploit DB Packet Storm
230675 7.5 危険 vu - VU Mass Mailer の redir.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6138 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
230676 4.3 警告 phpslideshow - PHPSlideShow の phpslideshow.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6135 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
230677 7.5 危険 PHPKIT - PHPKIT の pkinc/public/article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6134 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
230678 2.1 注意 レッドハット - scanbuttond の buttonpressed.sh における任意のファイルを上書きされる脆弱性 CWE-16
環境設定 		CVE-2007-6131 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
230679 7.5 危険 project alumni - project alumni における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6127 2012-12-20 18:33 2007-11-26 Show GitHub Exploit DB Packet Storm
230680 4.3 警告 project alumni - project alumni におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6126 2012-12-20 18:33 2007-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214011 8.8 HIGH
Network 		seczetta neprofile A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this header resulting in an adversary controlling the execution flo… CWE-74
Injection 		CVE-2020-12855 2024-11-21 14:00 2020-08-27 Show GitHub Exploit DB Packet Storm
214012 7.5 HIGH
Network 		oasis-open oasis_digital_signature_services In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a valid or invalid outcome for a valid or invalid signature) via a crafted XML sign… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13101 2024-11-21 14:00 2020-08-24 Show GitHub Exploit DB Packet Storm
214013 6.1 MEDIUM
Network 		zulip zulip_server Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. CWE-79
Cross-site Scripting 		CVE-2020-12759 2024-11-21 14:00 2020-08-21 Show GitHub Exploit DB Packet Storm
214014 6.1 MEDIUM
Network 		teradici pcoip_management_console Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload. CWE-79
Cross-site Scripting 		CVE-2020-13183 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
214015 8.8 HIGH
Network 		noviflow noviware The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" comma… CWE-78
OS Command  		CVE-2020-13122 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
214016 4.3 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13286 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
214017 6.5 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13281 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
214018 5.4 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. CWE-79
Cross-site Scripting 		CVE-2020-13285 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
214019 5.4 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. CWE-79
Cross-site Scripting 		CVE-2020-13283 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
214020 3.5 LOW
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access. CWE-281
 Improper Preservation of Permissions 		CVE-2020-13282 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm