Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231091 6.6 警告 トレンドマイクロ - Trend Micro PC-Cillin Internet Security 2007 などで使用されている Trend Micro AntiVirus スキャンエンジンにおけるバッファオーバーフローの脆弱性 CWE-119
CWE-264
CVE-2007-4277 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231092 4.3 警告 visionera ab - VisionProject におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4265 2012-12-20 18:33 2007-08-9 Show GitHub Exploit DB Packet Storm
231093 7.5 危険 prozilla - Prozilla Pub Site Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4258 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231094 5 警告 ynp - YNP Portal System の showpage.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4256 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231095 4.3 警告 toolbar gaming - Internet Explorer 用の Toolbar Gaming ツールバーにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4248 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231096 9.3 危険 vietphp - VietPHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4235 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231097 4.3 警告 PHPNUKE - PHP-Nuke の Search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4212 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231098 7.5 危険 redline software - la-nai CMS の module.php における SQL インジェクションの脆弱性 - CVE-2007-4210 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231099 4.3 警告 The Sleuth Kit - Brian Carrier TSK の ext2fs.c におけるサービス運用妨害 (DoS) 脆弱性 - CVE-2007-4195 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231100 5 警告 TIBCO Software - TIBCO RV クライアントのデフォルト設定におけるメッセージの内容をキャプチャされる脆弱性 - CVE-2007-4160 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212651 5.4 MEDIUM
Network
naviwebs navigate_cms An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to re… CWE-79
Cross-site Scripting
CVE-2020-14014 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
212652 5.4 MEDIUM
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. CWE-79
Cross-site Scripting
CVE-2020-14007 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212653 5.4 MEDIUM
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. CWE-79
Cross-site Scripting
CVE-2020-14006 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212654 8.8 HIGH
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event. NVD-CWE-noinfo
CVE-2020-14005 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212655 5.4 MEDIUM
Network
paessler prtg_network_monitor XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScri… CWE-79
Cross-site Scripting
CVE-2020-14073 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212656 7.5 HIGH
Network
rakuten viber Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication req… CWE-88
Argument Injection
CVE-2020-14049 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212657 8.8 HIGH
Network
kordil_edms_project kordil_edms documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-13887 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212658 5.4 MEDIUM
Network
kordil_edms_project kordil_edms Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php. CWE-79
Cross-site Scripting
CVE-2020-13888 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212659 8.2 HIGH
Network
ibi webfocus_business_intelligence In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps… CWE-611
XXE
CVE-2020-14204 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm
212660 8.8 HIGH
Network
ibi webfocus_business_intelligence WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of a… CWE-352
 Origin Validation Error
CVE-2020-14203 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm