Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231091 4.3 警告 Lamp Design - Storesprite におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4307 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231092 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4306 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231093 6.2 警告 systrace
Todd C. Miller
sysjail		 - NetBSD および OpenBSD 上で稼動している Systrace の Sudo monitor mode などにおけるシステムコール割り込みを無効にされる脆弱性 - CVE-2007-4305 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231094 6.8 警告 サン・マイクロシステムズ - Sun Java System Portal Server における任意の Java メソッドを実行される脆弱性 - CVE-2007-4289 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231095 5 警告 s9y - Serendipity の entryproperties プラグインにおけるパスワード保護を回避される脆弱性 - CVE-2007-4282 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231096 6.6 警告 トレンドマイクロ - Trend Micro PC-Cillin Internet Security 2007 などで使用されている Trend Micro AntiVirus スキャンエンジンにおけるバッファオーバーフローの脆弱性 CWE-119
CWE-264
CVE-2007-4277 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231097 4.3 警告 visionera ab - VisionProject におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4265 2012-12-20 18:33 2007-08-9 Show GitHub Exploit DB Packet Storm
231098 7.5 危険 prozilla - Prozilla Pub Site Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4258 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231099 5 警告 ynp - YNP Portal System の showpage.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4256 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231100 4.3 警告 toolbar gaming - Internet Explorer 用の Toolbar Gaming ツールバーにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4248 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213051 7.8 HIGH
Local 		foxitsoftware foxit_studio_photo An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file. CWE-787
 Out-of-bounds Write 		CVE-2020-13811 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213052 6.0 MEDIUM
Local 		qemu
canonical
opensuse 		qemu
ubuntu_linux
leap 		ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call. CWE-674
 Uncontrolled Recursion 		CVE-2020-13800 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213053 5.5 MEDIUM
Local 		qemu qemu hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space. CWE-125
Out-of-bounds Read 		CVE-2020-13791 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213054 5.6 MEDIUM
Network 		qemu
canonical
debian 		qemu
ubuntu_linux
debian_linux 		rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation. CWE-787
 Out-of-bounds Write 		CVE-2020-13765 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213055 7.7 HIGH
Network 		postgresql
quarkus
netapp
fedoraproject
debian 		postgresql_jdbc_driver
quarkus
steelstore_cloud_integrated_storage
fedora
debian_linux 		PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE. CWE-611
XXE 		CVE-2020-13692 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213056 6.1 MEDIUM
Network 		phplist phplist phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php. CWE-79
Cross-site Scripting 		CVE-2020-13827 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213057 7.7 HIGH
Network 		indutny elliptic The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-13822 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213058 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13810 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213059 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13809 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
213060 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-13808 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm