Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230751	6.5	警告	WordPress.org	-	WordPress の options.php における SQL インジェクションの脆弱性	-	CVE-2007-4154	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230752	2.1	注意	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4153	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230753	9.3	危険	visionsoft	-	Visionsoft Audit の VSAOD におけるリプレイ攻撃を実行される脆弱性	-	CVE-2007-4152	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230754	4.3	警告	visionsoft	-	Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性	-	CVE-2007-4151	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230755	10	危険	visionsoft	-	Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性	-	CVE-2007-4150	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230756	10	危険	visionsoft	-	Visionsoft Audit の VSAOD における任意のファイルを作成される脆弱性	-	CVE-2007-4149	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230757	10	危険	visionsoft	-	Visionsoft Audit の VSAOD におけるヒープベースのバッファオーバーフローの脆弱性	-	CVE-2007-4148	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230758	4.3	警告	webevents	-	ebEvent の webevent.cgi におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4146	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230759	4	警告	phpcoupon	-	phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性	-	CVE-2007-4143	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

230760	4.3	警告	WordPress.org	-	WordPress の Temporary Uploads 編集機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4139	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197541	6.5	MEDIUM Network	golfbuddyglobal	course_manager	In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.	CWE-200 CWE-326 Information Exposure Inadequate Encryption Strength	CVE-2020-9337	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197542	5.3	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-9407	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197543	9.8	CRITICAL Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.	CWE-94 Code Injection	CVE-2020-9406	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197544	6.1	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.	CWE-79 Cross-site Scripting	CVE-2020-9405	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197545	9.8	CRITICAL Network	ispconfig	ispconfig	ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.	CWE-89 SQL Injection	CVE-2020-9398	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197546	8.8	HIGH Network	supsystic	pricing_table_by_supsystic	An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-9394	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197547	6.1	MEDIUM Network	supsystic	pricing_table_by_supsystic	An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-9393	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197548	6.5	MEDIUM Network	mitel	micontact_center_business	The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful e…	NVD-CWE-noinfo	CVE-2020-9379	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197549	5.5	MEDIUM Local	linux fedoraproject netapp	linux_kernel fedora cloud_backup steelstore_cloud_integrated_storage data_availability_services solidfire hci_management_node active_iq_unified_manager h410c_firmware	An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory …	CWE-787 Out-of-bounds Write	CVE-2020-9391	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197550	4.8	MEDIUM Network	10web	photo_gallery	Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arb…	CWE-79 Cross-site Scripting	CVE-2020-9335	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed