Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231031 7.5 危険 skyportal - SkyPortal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6078 2012-12-20 18:33 2007-11-21 Show GitHub Exploit DB Packet Storm
231032 7.5 危険 profilecms - ProfileCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6058 2012-12-20 18:33 2007-11-20 Show GitHub Exploit DB Packet Storm
231033 6.8 警告 swsoft - SWSoft Confixx Professional の fehler.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6042 2012-12-20 18:33 2007-11-20 Show GitHub Exploit DB Packet Storm
231034 7.5 危険 rigs of rogs - RoR のサーバの sequencer.cpp におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6041 2012-12-20 18:33 2007-11-20 Show GitHub Exploit DB Packet Storm
231035 9 危険 Wonderware - Invensys Wonderware InTouch における任意のプログラムを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6033 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
231036 7.8 危険 van dyke technologies - VanDyke VShell におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-6031 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
231037 10 危険 weird solutions - Weird Solutions BOOTPTurbo における脆弱性 CWE-noinfo
情報不足
CVE-2007-6030 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
231038 7.1 危険 w1.fi - wpa_supplicant の driver_wext.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6025 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
231039 6.8 警告 WordPress.org - Wordpress における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-6013 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
231040 7.8 危険 pioneers - pioneers におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6010 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210121 5.5 MEDIUM
Local
gpac gpac The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. CWE-476
 NULL Pointer Dereference
CVE-2020-22352 2024-11-21 14:13 2021-08-5 Show GitHub Exploit DB Packet Storm
210122 6.1 MEDIUM
Network
nukeviet nukeviet Cross Site Scripting (XSS) vulnerability in NukeViet cms 4.4.0 via the editor in the News module. CWE-79
Cross-site Scripting
CVE-2020-22765 2024-11-21 14:13 2021-07-30 Show GitHub Exploit DB Packet Storm
210123 8.8 HIGH
Network
flatpress flatpress Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php. CWE-352
 Origin Validation Error
CVE-2020-22761 2024-11-21 14:13 2021-07-30 Show GitHub Exploit DB Packet Storm
210124 4.8 MEDIUM
Network
naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature. CWE-79
Cross-site Scripting
CVE-2020-23243 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210125 4.8 MEDIUM
Network
naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature. CWE-79
Cross-site Scripting
CVE-2020-23242 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210126 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature. CWE-79
Cross-site Scripting
CVE-2020-23241 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210127 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature. CWE-79
Cross-site Scripting
CVE-2020-23240 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210128 4.8 MEDIUM
Network
textpattern textpattern Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature. CWE-79
Cross-site Scripting
CVE-2020-23239 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210129 5.4 MEDIUM
Network
evo evolution_cms Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature. CWE-79
Cross-site Scripting
CVE-2020-23238 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
210130 4.8 MEDIUM
Network
lavalite lavalite Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,". CWE-79
Cross-site Scripting
CVE-2020-23234 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm