Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231061 6.8 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2245 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231062 6.8 警告 PunBB - PunBB の footer.php における include/user/ 配下のローカルファイルをインクルードされる脆弱性 - CVE-2007-2236 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231063 4.3 警告 PunBB - PunBB におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2235 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231064 7.5 危険 PunBB - PunBB の include/common.php における global パラメータを登録される脆弱性 - CVE-2007-2234 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231065 7.5 危険 ripe website manager - Ripe Website Manager の contact/index.php における SQL インジェクションの脆弱性 - CVE-2007-2207 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231066 4.3 警告 ripe website manager - Ripe Website Manager の contact/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2206 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231067 7.5 危険 post revolution - Post Revolution における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2201 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231068 6.8 警告 supasite - Supasite における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2185 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231069 7.5 危険 php-ring - PHP-Ring Webring System の index.php における SQL インジェクションの脆弱性 - CVE-2007-2183 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231070 6.8 警告 webinsta - Webinsta FM Manager の admin/login.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2181 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210931 5.9 MEDIUM
Network 		mutt
debian
neomutt
fedoraproject
canonical
opensuse 		mutt
debian_linux
neomutt
fedora
ubuntu_linux
leap 		Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g.,… CWE-74
Injection 		CVE-2020-14954 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
210932 8.8 HIGH
Network 		aapanel aapanel aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request (start, stop, or restart) to the setti… CWE-78
OS Command  		CVE-2020-14950 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
210933 9.8 CRITICAL
Network 		tendenci tendenci Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14942 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
210934 8.8 HIGH
Network 		squirrelmail squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14933 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210935 9.8 CRITICAL
Network 		squirrelmail squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14932 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210936 9.8 CRITICAL
Network 		dmitry_project dmitry A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_… CWE-787
 Out-of-bounds Write 		CVE-2020-14931 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210937 8.1 HIGH
Network 		bt_ctroms_terminal_project bt_ctroms_terminal An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp req… CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2020-14930 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210938 7.5 HIGH
Network 		alpine_project
fedoraproject
debian 		alpine
fedora
debian_linux 		Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the… NVD-CWE-Other
CVE-2020-14929 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210939 4.8 MEDIUM
Network 		naviwebs navigate_cms Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen. CWE-79
Cross-site Scripting 		CVE-2020-14927 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
210940 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page. CWE-79
Cross-site Scripting 		CVE-2020-14926 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm