Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230871	10	危険	tis	-	TIS Internet FWTK の ftp-gw におけるバッファオーバーフローの脆弱性	-	CVE-2007-0201	2012-12-20 18:19	2007-01-11	Show	GitHub Exploit DB Packet Storm

230872	6.8	警告	サン・マイクロシステムズ	-	iPlanet Web Server の /search におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-0183	2012-12-20 18:19	2007-01-12	Show	GitHub Exploit DB Packet Storm

230873	7.5	危険	scriptaty	-	magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0182	2012-12-20 18:19	2007-01-12	Show	GitHub Exploit DB Packet Storm

230874	7.5	危険	scriptaty	-	magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0181	2012-12-20 18:19	2007-01-10	Show	GitHub Exploit DB Packet Storm

230875	7.5	危険	PHPKIT	-	PHPKIT の comment.php における SQL インジェクションの脆弱性	-	CVE-2007-0179	2012-12-20 18:19	2007-01-10	Show	GitHub Exploit DB Packet Storm

230876	7.5	危険	sina	-	Sina UC2006 の BRWOSSRE2UC.dll ActiveX コントロールにおけるバッファオーバーフローの脆弱性	-	CVE-2007-0174	2012-12-20 18:19	2007-01-10	Show	GitHub Exploit DB Packet Storm

230877	7.5	危険	voice of web	-	AllMyGuests における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0172	2012-12-20 18:19	2007-01-10	Show	GitHub Exploit DB Packet Storm

230878	7.5	危険	voice of web	-	AllMyLinks の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0171	2012-12-20 18:19	2007-01-10	Show	GitHub Exploit DB Packet Storm

230879	7.5	危険	wgs-ppc ppc search engine	-	WGS-PPC における PHP ファイルインクルージョンの脆弱性	-	CVE-2007-0167	2012-12-20 18:19	2007-01-9	Show	GitHub Exploit DB Packet Storm

230880	7.8	危険	securekit	-	SecureKit Steganography における認証要求を回避される脆弱性	-	CVE-2007-0163	2012-12-20 18:19	2007-01-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211241	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-13815	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211242	9.8	CRITICAL Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.	CWE-416 Use After Free	CVE-2020-13814	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211243	7.8	HIGH Local	foxitsoftware	foxit_studio_photo	An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto366_3.6.6.916.exe is u…	CWE-426 Untrusted Search Path	CVE-2020-13813	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211244	7.8	HIGH Local	foxitsoftware	foxit_studio_photo	An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory.	CWE-426 Untrusted Search Path	CVE-2020-13812	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211245	7.8	HIGH Local	foxitsoftware	foxit_studio_photo	An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file.	CWE-787 Out-of-bounds Write	CVE-2020-13811	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211246	6.0	MEDIUM Local	qemu canonical opensuse	qemu ubuntu_linux leap	ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.	CWE-674 Uncontrolled Recursion	CVE-2020-13800	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211247	5.5	MEDIUM Local	qemu	qemu	hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.	CWE-125 Out-of-bounds Read	CVE-2020-13791	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211248	5.6	MEDIUM Network	qemu canonical debian	qemu ubuntu_linux debian_linux	rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.	CWE-787 Out-of-bounds Write	CVE-2020-13765	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211249	7.7	HIGH Network	postgresql quarkus netapp fedoraproject debian	postgresql_jdbc_driver quarkus steelstore_cloud_integrated_storage fedora debian_linux	PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.	CWE-611 XXE	CVE-2020-13692	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

211250	6.1	MEDIUM Network	phplist	phplist	phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.	CWE-79 Cross-site Scripting	CVE-2020-13827	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed