Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231061 4.3 警告 rndlabs - Babo Violent におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4379 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231062 6.8 警告 rndlabs - Babo Violent におけるフォーマットストリングの脆弱性 - CVE-2007-4378 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231063 6.8 警告 szymon kosok - Szymon Kosok Best Top List の banner-upload.php における banners/ 配下の任意の PHP ファイルを実行される脆弱性 - CVE-2007-4376 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231064 4 警告 rndlabs - Babo Violent におけるメッセージを偽造される脆弱性 - CVE-2007-4374 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231065 6.8 警告 rndlabs - Babo Violent のサーバにおける認証を回避される脆弱性 - CVE-2007-4373 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231066 7.5 危険 racer - Racer の client などにおけるバッファオーバーフローの脆弱性 - CVE-2007-4370 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231067 5 警告 sote - SOTEeSKLEP の go/_files におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4369 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231068 5 警告 wengo - WengoPhone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4366 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231069 6.8 警告 prozilla - Prozilla Webring の category.php における SQL インジェクションの脆弱性 - CVE-2007-4362 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231070 6.8 警告 skilmatch staffing systems - SkilMatch Staffing Systems JobLister3 における SQL インジェクションの脆弱性 - CVE-2007-4359 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210591 5.4 MEDIUM
Network 		midasolutions eframework Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15918 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210592 9.8 CRITICAL
Network 		claws-mail
fedoraproject
opensuse 		claws-mail
fedora
leap
backports_sle 		common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. NVD-CWE-noinfo
CVE-2020-15917 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210593 9.8 CRITICAL
Network 		tenda ac15_firmware goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. CWE-78
OS Command  		CVE-2020-15916 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210594 6.5 MEDIUM
Adjacent 		tesla model_3_firmware Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue NVD-CWE-noinfo
CVE-2020-15912 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210595 8.8 HIGH
Network 		softwareupdate_project softwareupdate A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter o… CWE-89
SQL Injection 		CVE-2020-15887 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210596 8.8 HIGH
Network 		reportdata_project reportdata A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/… CWE-89
SQL Injection 		CVE-2020-15886 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210597 5.4 MEDIUM
Network 		munkireport_project comment A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment. CWE-79
Cross-site Scripting 		CVE-2020-15885 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210598 8.8 HIGH
Network 		munkireport_project munkireport A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data. CWE-89
SQL Injection 		CVE-2020-15884 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210599 6.1 MEDIUM
Network 		managedinstalls_project managedinstalls A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (thr… CWE-79
Cross-site Scripting 		CVE-2020-15883 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210600 8.1 HIGH
Network 		munkireport_project munkireport A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database. CWE-352
 Origin Validation Error 		CVE-2020-15882 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm