Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230851 7.1 危険 total commander - Total Commander における任意のファイルを削除される脆弱性 - CVE-2007-0263 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230852 7.8 危険 WordPress.org - WordPress における重要な情報を取得される脆弱性 - CVE-2007-0262 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230853 10 危険 snews - sNews の snews.php における許可されていない管理者操作を実行される脆弱性 - CVE-2007-0261 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230854 7.8 危険 VideoLAN - VideoLAN VLC におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0256 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230855 9.3 危険 Xine - XINE におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0255 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230856 10 危険 Xine - xine-ui の errors.c におけるフォーマットストリングの脆弱性 - CVE-2007-0254 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230857 7.8 危険 Snort.org - Snort の src/decode.c における特定のメモリ領域のデリファレンスを誘発される脆弱性 - CVE-2007-0251 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
230858 5 警告 poptop - PoPToP pptpd の pptpgre.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0244 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
230859 4.3 警告 Zope Foundation - Zope におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0240 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
230860 7.5 危険 WordPress.org - WordPress の wp-trackback.php における任意の SQL コマンドを実行される脆弱性 - CVE-2007-0233 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212501 6.1 MEDIUM
Network
wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-pos… CWE-79
Cross-site Scripting
CVE-2020-11509 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212502 5.4 MEDIUM
Network
wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbit… CWE-79
Cross-site Scripting
CVE-2020-11508 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212503 7.5 HIGH
Network
netty
debian
fedoraproject
netapp
oracle
netty
debian_linux
fedora
oncommand_workflow_automation
oncommand_insight
oncommand_api_services
webcenter_portal
nosql_database
communications_messaging_server
communicati…
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty serve… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-11612 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212504 6.1 MEDIUM
Network
cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the… CWE-601
Open Redirect
CVE-2020-11611 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212505 8.8 HIGH
Network
cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() funct… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-11610 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212506 4.3 MEDIUM
Physics
linux
canonical
linux_kernel
ubuntu_linux
An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid des… CWE-476
 NULL Pointer Dereference
CVE-2020-11609 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212507 7.8 HIGH
Local
nchsoftware express_invoice NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. CWE-522
 Insufficiently Protected Credentials
CVE-2020-11560 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212508 6.1 MEDIUM
Network
rankmath seo The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection … CWE-601
Open Redirect
CVE-2020-11515 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212509 9.8 CRITICAL
Network
rankmath seo The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileg… CWE-862
 Missing Authorization
CVE-2020-11514 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
212510 5.4 MEDIUM
Network
idxbroker impress_for_idx_broker Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings… CWE-79
Cross-site Scripting
CVE-2020-11512 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm