Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230681 4.3 警告 アクシスコミュニケーションズ - AXIX 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5212 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
230682 7.5 危険 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5196 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
230683 6.8 警告 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5195 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
230684 6.9 警告 rPath, Inc - rMake の Chroot サーバにおけるルート権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5194 2012-12-20 18:33 2007-10-2 Show GitHub Exploit DB Packet Storm
230685 5 警告 TWiki - Debian GNU/Linux などの OS 上で稼動する twiki 用の初期設定における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2007-5193 2012-12-20 18:33 2007-10-2 Show GitHub Exploit DB Packet Storm
230686 7.5 危険 x-script - x-script GuestBook の mes_add.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5189 2012-12-20 18:33 2007-10-3 Show GitHub Exploit DB Packet Storm
230687 7.5 危険 XOOPS - Xoops の XOOPS アップローダークラスにおける任意のファイルをアップロードされる脆弱性 CWE-noinfo
情報不足 		CVE-2007-5188 2012-12-20 18:33 2007-10-1 Show GitHub Exploit DB Packet Storm
230688 7.5 危険 PHP-Fusion - PHP-Fusion 用の Expanded Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5187 2012-12-20 18:33 2007-10-3 Show GitHub Exploit DB Packet Storm
230689 6.8 警告 segue cms - Segue CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5186 2012-12-20 18:33 2007-10-3 Show GitHub Exploit DB Packet Storm
230690 6.8 警告 phpwcms-xt - phpWCMS XT における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5185 2012-12-20 18:33 2007-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213351 10.0 CRITICAL
Network 		beakerbrowser beaker Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. This occurs because Electron context isolation is not used, and therefore an attacker can conduct a prototype-p… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-12079 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213352 8.8 HIGH
Network 		mappresspro mappress The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capability checks), leading to remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12077 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213353 8.8 HIGH
Network 		supsystic data_tables_generator The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS. CWE-352
 Origin Validation Error 		CVE-2020-12076 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213354 8.8 HIGH
Network 		supsystic data_tables_generator The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. CWE-276
Incorrect Default Permissions  		CVE-2020-12075 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213355 8.8 HIGH
Network 		webtoffee import_export_wordpress_users The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV. CWE-269
 Improper Privilege Management 		CVE-2020-12074 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213356 8.8 HIGH
Network 		cyberchimps gutenberg_\&_elementor_templates_importer_for_responsive The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests. NVD-CWE-Other
CVE-2020-12073 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213357 4.8 MEDIUM
Network 		anchorcms anchor Anchor 0.12.7 allows admins to cause XSS via crafted post content. CWE-79
Cross-site Scripting 		CVE-2020-12071 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213358 7.5 HIGH
Network 		teeworlds
opensuse
fedoraproject
debian
canonical 		teeworlds
leap
backports_sle
fedora
debian_linux
ubuntu_linux 		CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. CWE-20
 Improper Input Validation  		CVE-2020-12066 2024-11-21 13:59 2020-04-23 Show GitHub Exploit DB Packet Storm
213359 7.5 HIGH
Network 		linuxfoundation
canonical 		ceph
ubuntu_linux 		An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception. CWE-476
 NULL Pointer Dereference 		CVE-2020-12059 2024-11-21 13:59 2020-04-22 Show GitHub Exploit DB Packet Storm
213360 7.5 HIGH
Network 		mediawiki mediawiki The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In oth… NVD-CWE-noinfo
CVE-2020-12051 2024-11-21 13:59 2020-04-22 Show GitHub Exploit DB Packet Storm