Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230971 7.5 危険 scribe - Ben Ng Scribe の forum.php における regged/ 配下の特定のファイルへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5822 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
230972 7.6 危険 sblog - sBlog の blocks_edit_do.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5818 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
230973 10 危険 SonicWALL - SonicWall SSL-VPN 200 および SSL-VPN 2000/4000 の WebCacheCleaner ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5815 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
230974 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5814 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
230975 6.8 警告 ssreader - SSReader の Ultra Star Reader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5807 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
230976 7.5 危険 work system e-commerce - WORK system e-commerce における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5801 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
230977 6.8 警告 tom willmot - WordPress 用の BackUpWordPress プラグインにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5800 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
230978 7.1 危険 stonesoft - Stonesoft StoneGate IPS におけるシステムへ侵入される脆弱性 CWE-DesignError
CVE-2007-5793 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
230979 7.1 危険 Vonage - Vonage Motorola Phone Adapter VT 2142-VD における盗聴される脆弱性 CWE-310
暗号の問題 		CVE-2007-5792 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
230980 10 危険 Vonage - Vonage Motorola Phone Adapter VT 2142-VD における偽造された INVITE メッセージを送信される脆弱性 CWE-287
不適切な認証 		CVE-2007-5791 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200441 9.8 CRITICAL
Network 		tobesoft xplatform XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execut… NVD-CWE-noinfo
CVE-2020-7815 2024-11-21 14:37 2020-07-10 Show GitHub Exploit DB Packet Storm
200442 9.8 CRITICAL
Network 		raonwiz raon_k_upload RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-ex… CWE-20
 Improper Input Validation  		CVE-2020-7814 2024-11-21 14:37 2020-07-10 Show GitHub Exploit DB Packet Storm
200443 5.3 MEDIUM
Network 		sockjs_project sockjs Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-7693 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
200444 9.1 CRITICAL
Network 		google oauth_client_library_for_java PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarante… CWE-863
 Incorrect Authorization 		CVE-2020-7692 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
200445 9.8 CRITICAL
Network 		freebsd freebsd In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end … CWE-787
 Out-of-bounds Write 		CVE-2020-7458 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
200446 8.1 HIGH
Network 		freebsd freebsd In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS sock… CWE-362
CWE-416
CWE-662
Race Condition
 Use After Free
 Improper Synchronization 		CVE-2020-7457 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
200447 6.1 MEDIUM
Network 		parall jspdf In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex. CWE-79
Cross-site Scripting 		CVE-2020-7691 2024-11-21 14:37 2020-07-6 Show GitHub Exploit DB Packet Storm
200448 6.1 MEDIUM
Network 		parall jspdf All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method. CWE-79
Cross-site Scripting 		CVE-2020-7690 2024-11-21 14:37 2020-07-6 Show GitHub Exploit DB Packet Storm
200449 9.8 CRITICAL
Network 		nexaweb nexacro_14
nexacro_17 		Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be lev… CWE-20
 Improper Input Validation  		CVE-2020-7821 2024-11-21 14:37 2020-07-2 Show GitHub Exploit DB Packet Storm
200450 9.8 CRITICAL
Network 		nexaweb nexacro_14
nexacro_17 		Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can… CWE-20
 Improper Input Validation  		CVE-2020-7820 2024-11-21 14:37 2020-07-2 Show GitHub Exploit DB Packet Storm