Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 20, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230861 | 7.8 | 危険 | rainbowsoft | - | Z-Blog におけるデータベースをダウンロードされる脆弱性 | - | CVE-2007-3083 | 2012-12-20 18:19 | 2007-06-6 | Show | GitHub Exploit DB Packet Storm |
| 230862 | 7.8 | 危険 | sendcard | - | Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-3082 | 2012-12-20 18:19 | 2007-06-6 | Show | GitHub Exploit DB Packet Storm |
| 230863 | 7.8 | 危険 | zenturi | - | Zenturi ProgramChecker の sasatl.dll における任意のファイルをダウンロードされる脆弱性 | - | CVE-2007-3076 | 2012-12-20 18:19 | 2007-06-6 | Show | GitHub Exploit DB Packet Storm |
| 230864 | 7.5 | 危険 | phpreactor | - | Reactor における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-3066 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230865 | 5 | 警告 | sendcard | - | SendCard における重要な情報を取得される脆弱性 | - | CVE-2007-3059 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230866 | 6.8 | 警告 | XOOPS | - | XOOPS 用の icontent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-3057 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230867 | 4.3 | 警告 | WebSVN | - | WebSVN の filedetails.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-3056 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230868 | 7.5 | 危険 | postnuke software foundation | - | PostNuke 用の PNphpBB2 モジュールにおける SQL インジェクションの脆弱性 | - | CVE-2007-3052 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230869 | 7.5 | 危険 | revokesoft | - | RevokeSoft RevokeBB の inc/class_users.php における SQL インジェクションの脆弱性 | - | CVE-2007-3051 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
| 230870 | 10 | 危険 | Vonage | - | Vonage VoIP Telephone Adapter における管理アクセス権限を取得される脆弱性 | - | CVE-2007-3047 | 2012-12-20 18:19 | 2007-06-5 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 198521 | 7.5 |
HIGH
Network |
u-root | u-root | This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path travers… |
CWE-22
Path Traversal |
CVE-2020-7666 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198522 | 7.5 |
HIGH
Network |
u-root | u-root | This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction. |
CWE-22
Path Traversal |
CVE-2020-7665 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198523 | 9.8 |
CRITICAL
Network |
gedi_project | gedi | All versions of package gedi are vulnerable to Prototype Pollution via the set function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7727 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198524 | 9.8 |
CRITICAL
Network |
safe-object2_project | safe-object2 | All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7726 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198525 | 9.8 |
CRITICAL
Network |
guidesmiths | worksmith | All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7725 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198526 | 9.8 |
CRITICAL
Network |
tiny-conf_project | tiny-conf | All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7724 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198527 | 9.8 |
CRITICAL
Network |
yola | promisehelpers | All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7723 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198528 | 9.8 |
CRITICAL
Network |
nodee-utils_project | nodee-utils | All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7722 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198529 | 9.8 |
CRITICAL
Network |
node-oojs_project | node-oojs | All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7721 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |
| 198530 | 7.3 |
HIGH
Network |
digitalbazaar | forge | The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7720 | 2024-11-21 14:37 | 2020-09-1 | Show | GitHub Exploit DB Packet Storm |