Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230881 6.8 警告 phpMyFAQ - phpMyFAQ における "サーバ上にファイルをアップロードする権限を取得される" 脆弱性 CWE-noinfo
情報不足
CVE-2007-1032 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
230882 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の include/db_conn.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1031 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230883 7.6 危険 quicksoft - Quiksoft EasyMail Objects の IMAP4 コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1029 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230884 7.5 危険 scriptdungeon - XLAtunes の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1026 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230885 7.5 危険 virtualsystem - VS-Link-Partner の inc/functions_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1025 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230886 7.5 危険 Snitz - Snitz Forums 2000 の pop_profile.asp における SQL インジェクションの脆弱性 - CVE-2007-1023 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230887 7.5 危険 turuncu portal - Turuncu Portal の h_goster.asp における SQL インジェクションの脆弱性 - CVE-2007-1022 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230888 10 危険 xfairguy - CodeAvalanche News の inc_listnews.asp における SQL インジェクションの脆弱性 - CVE-2007-1021 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230889 6.8 警告 webSPELL - webSPELL の news.php における SQL インジェクションの脆弱性 - CVE-2007-1019 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230890 9.3 危険 virtualsystem - VirtualSystem VS-News-System の tpl/header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1018 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198941 6.1 MEDIUM
Network
cacti
debian
opensuse
suse
fedoraproject
cacti
debian_linux
leap
backports_sle
package_hub
fedora
extra_packages_for_enterprise_linux
Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the descrip… CWE-79
Cross-site Scripting
CVE-2020-7106 2024-11-21 14:36 2020-01-16 Show GitHub Exploit DB Packet Storm
198942 7.5 HIGH
Network
redislabs
debian
fedoraproject
hiredis
debian_linux
fedora
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked. CWE-476
 NULL Pointer Dereference
CVE-2020-7105 2024-11-21 14:36 2020-01-16 Show GitHub Exploit DB Packet Storm
198943 6.5 MEDIUM
Adjacent
wireshark
debian
wireshark
debian_linux
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes. CWE-476
 NULL Pointer Dereference
CVE-2020-7045 2024-11-21 14:36 2020-01-16 Show GitHub Exploit DB Packet Storm
198944 7.5 HIGH
Network
wireshark
fedoraproject
opensuse
oracle
wireshark
fedora
leap
solaris
zfs_storage_appliance_kit
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors. CWE-125
CWE-193
Out-of-bounds Read
 Off-by-one Error
CVE-2020-7044 2024-11-21 14:36 2020-01-16 Show GitHub Exploit DB Packet Storm
198945 8.8 HIGH
Network
cacti cacti data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm. CWE-20
 Improper Input Validation 
CVE-2020-7058 2024-11-21 14:36 2020-01-15 Show GitHub Exploit DB Packet Storm
198946 5.3 MEDIUM
Network
hikvision ds-7204hghi-f1_firmware Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-7057 2024-11-21 14:36 2020-01-15 Show GitHub Exploit DB Packet Storm
198947 8.8 HIGH
Network
mz-automation libiec61850 MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type. CWE-787
 Out-of-bounds Write
CVE-2020-7054 2024-11-21 14:36 2020-01-15 Show GitHub Exploit DB Packet Storm
198948 7.8 HIGH
Local
linux linux_kernel In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i… CWE-416
 Use After Free
CVE-2020-7053 2024-11-21 14:36 2020-01-15 Show GitHub Exploit DB Packet Storm
198949 9.1 CRITICAL
Network
yet_another_java_service_wrapper_project yet_another_java_service_wrapper An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially … CWE-611
XXE
CVE-2020-6958 2024-11-21 14:36 2020-01-14 Show GitHub Exploit DB Packet Storm
198950 6.1 MEDIUM
Network
cayintech smp-pro4_firmware An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS. CWE-79
Cross-site Scripting
CVE-2020-6955 2024-11-21 14:36 2020-01-14 Show GitHub Exploit DB Packet Storm