Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230981 4.3 警告 quickersite - QuickerSite の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3940 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230982 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の index.php における SQL インジェクションの脆弱性 - CVE-2007-3939 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230983 9.3 危険 phpBB - phpBB 用の SupaNav モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3935 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230984 7.5 危険 quickestore - QuickEStore の insertorder.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3933 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230985 4.4 警告 サムスン - Samsung SCX-4200 Driver のインストールスクリプトにおける権限を取得される脆弱性 - CVE-2007-3931 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230986 7.6 危険 Yahoo! - Yahoo! Messenger におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3928 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
230987 7.8 危険 wesnoth - Wesnoth のマルチプレーヤーエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2007-3917 2012-12-20 18:33 2007-10-11 Show GitHub Exploit DB Packet Storm
230988 4.4 警告 skk openlab - SKK Tools の skkdic-expr.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2007-3916 2012-12-20 18:33 2007-09-23 Show GitHub Exploit DB Packet Storm
230989 7.5 危険 Zoph - Zoph における SQL インジェクションの脆弱性 - CVE-2007-3905 2012-12-20 18:33 2007-07-19 Show GitHub Exploit DB Packet Storm
230990 7.5 危険 popscript.com - Expert Advisor の index.php における SQL インジェクションの脆弱性 - CVE-2007-3882 2012-12-20 18:33 2007-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197731 7.8 HIGH
Local 		openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dl… CWE-281
 Improper Preservation of Permissions 		CVE-2020-9442 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197732 5.5 MEDIUM
Local 		avast antivirus_for_linux
antivirus_pro_plus
antivirus_pro 		The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. CWE-436
 Interpretation Conflict 		CVE-2020-9399 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197733 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9434 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197734 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9433 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197735 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9432 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197736 7.5 HIGH
Network 		wireshark
opensuse
fedoraproject
debian 		wireshark
leap
fedora
debian_linux 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operation… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-9431 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197737 7.5 HIGH
Network 		wireshark
fedoraproject
opensuse
debian 		wireshark
fedora
leap
debian_linux 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field. CWE-20
 Improper Input Validation  		CVE-2020-9430 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197738 7.5 HIGH
Network 		wireshark
opensuse 		wireshark
leap 		In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a… CWE-476
 NULL Pointer Dereference 		CVE-2020-9429 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197739 7.5 HIGH
Network 		wireshark
debian
fedoraproject
opensuse 		wireshark
debian_linux
fedora
leap 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing. CWE-125
Out-of-bounds Read 		CVE-2020-9428 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197740 7.5 HIGH
Network 		pureftpd
debian
fedoraproject
canonical 		pure-ftpd
debian_linux
fedora
extra_packages_for_enterprise_linux
ubuntu_linux 		An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) fu… CWE-824
 Access of Uninitialized Pointer 		CVE-2020-9274 2024-11-21 14:40 2020-02-27 Show GitHub Exploit DB Packet Storm