Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231131 7.5 危険 wikiwebweaver - WikiWebWeaver の index.php における任意のコードを実行される脆弱性 - CVE-2007-4182 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231132 5.8 警告 The Tor Project - Tor における torrc 設定ファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4174 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231133 5 警告 WordPress.org - WordPress 用の Unnamed テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4166 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231134 4.3 警告 WordPress.org
xu yiyang
- WordPress 用の Blue Memories テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4165 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231135 7.8 危険 TIBCO Software - TIBCO RV におけるトラフィックをキャプチャされる脆弱性 - CVE-2007-4162 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231136 4.3 警告 TIBCO Software - TIBCO RV の rvd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4161 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231137 4.3 警告 vikingboard - Vikingboard における重要な情報を取得される脆弱性 - CVE-2007-4089 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231138 4.3 警告 vikingboard - Vikingboard におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4088 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231139 5 警告 Tincan - Webbler CMS における任意の数量の偽装メールを送信される脆弱性 - CVE-2007-4073 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231140 5 警告 Tincan - Webbler CMS における重要な情報を取得される脆弱性 - CVE-2007-4072 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212771 6.1 MEDIUM
Network
drupal drupal Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8… CWE-79
Cross-site Scripting
CVE-2020-13668 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
212772 6.1 MEDIUM
Network
outsystems lifetime_management_console
platform_server
outsystems
A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store m… CWE-79
Cross-site Scripting
CVE-2020-13639 2024-11-21 14:01 2021-08-31 Show GitHub Exploit DB Packet Storm
212773 8.8 HIGH
Network
rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit … CWE-89
SQL Injection
CVE-2020-13589 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
212774 8.8 HIGH
Network
rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerabl… CWE-89
SQL Injection
CVE-2020-13588 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
212775 8.8 HIGH
Network
drupal drupal Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities. CWE-352
 Origin Validation Error
CVE-2020-13663 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm
212776 6.1 MEDIUM
Network
drupal drupal Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupa… CWE-79
Cross-site Scripting
CVE-2020-13688 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm
212777 7.8 HIGH
Local
zephyrproject zephyr Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/… CWE-190
 Integer Overflow or Wraparound
CVE-2020-13603 2024-11-21 14:01 2021-05-26 Show GitHub Exploit DB Packet Storm
212778 5.5 MEDIUM
Local
zephyrproject zephyr Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835). Fo… CWE-20
CWE-835
 Improper Input Validation 
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13602 2024-11-21 14:01 2021-05-26 Show GitHub Exploit DB Packet Storm
212779 9.8 CRITICAL
Network
zephyrproject zephyr Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advi… CWE-125
Out-of-bounds Read
CVE-2020-13601 2024-11-21 14:01 2021-05-26 Show GitHub Exploit DB Packet Storm
212780 7.6 HIGH
Physics
zephyrproject zephyr Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrpr… CWE-787
 Out-of-bounds Write
CVE-2020-13600 2024-11-21 14:01 2021-05-26 Show GitHub Exploit DB Packet Storm