Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231111 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3422 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231112 7.5 危険 web-app.org - web-app.org WebAPP のログイン機能などにおける脆弱性 - CVE-2007-3421 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231113 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3420 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231114 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/user.pl における脆弱性 - CVE-2007-3419 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231115 6.5 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/forum_display.pl における他のユーザになりすまされる脆弱性 - CVE-2007-3418 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231116 4.3 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3417 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231117 5 警告 web-app.org
web-app.net		 - web-app.org WebAPP などのプロフィールなどの管理におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-3416 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231118 7.5 危険 phpraider - phpRaider の index.php における SQL インジェクションの脆弱性 - CVE-2007-3415 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231119 5 警告 sergey lyubka - Sergey Lyubka Simple HTTPD における重要な情報を取得される脆弱性 - CVE-2007-3407 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231120 5 警告 sitedepth - SiteDepth CMS の ShowImage.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3404 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212451 6.1 MEDIUM
Network 		phplist phplist phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php. CWE-79
Cross-site Scripting 		CVE-2020-13827 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212452 7.7 HIGH
Network 		indutny elliptic The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-13822 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212453 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13810 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212454 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13809 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212455 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-13808 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212456 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-13807 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212457 7.5 HIGH
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation. CWE-416
 Use After Free 		CVE-2020-13806 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212458 9.8 CRITICAL
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-13805 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212459 9.8 CRITICAL
Network 		foxitsoftware reader
phantompdf 		An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-13804 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
212460 7.5 HIGH
Network 		foxitsoftware phantompdf
reader 		An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13803 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm