Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231141	7.5	危険	Pligg	-	Pligg CMS の login.php におけるユーザのパスワードを再設定される脆弱性	CWE-255 証明書・パスワード管理	CVE-2007-5579	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231142	7.5	危険	Secure Ideas	-	BASE における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2007-5578	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231143	4.3	警告	treble designs	-	1024 CMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-5575	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231144	6.8	警告	phpdj	-	PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5574	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231145	4.3	警告	sphpblog	-	Simple PHP Blog におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-5572	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231146	2.6	注意	simple php forum	-	NSSboard におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5564	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231147	7.5	危険	VirtueMart	-	VirtueMart における任意の PHP コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2007-5563	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231148	6.9	警告	シマンテック	-	Symantec Altiris Deployment Solution における認証資格情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2007-5555	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

231149	9.3	危険	TIBCO Software	-	TIBCO SmartPGM FX におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5546	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

231150	7.5	危険	TIBCO Software	-	TIBCO SmartPGM FX におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2007-5545	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197431	8.8	HIGH Network	redhat	openshift_container_platform	A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to t…	-	CVE-2021-20182	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197432	7.4	HIGH Network	mbsync_project debian fedoraproject	mbsync debian_linux fedora extra_packages_for_enterprise_linux	A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailb…	CWE-22 Path Traversal	CVE-2021-20247	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197433	4.3	MEDIUM Network	postgresql redhat fedoraproject	postgresql enterprise_linux software_collections fedora	A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat …	-	CVE-2021-20229	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197434	4.8	MEDIUM Network	redhat netapp	undertow oncommand_workflow_automation active_iq_unified_manager	A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid c…	CWE-444 HTTP Request Smuggling	CVE-2021-20220	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197435	8.1	HIGH Network	redhat	openshift_installer	A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned…	-	CVE-2021-20198	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197436	7.5	HIGH Network	stunnel	stunnel	A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a cert…	-	CVE-2021-20230	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197437	7.8	HIGH Local	linux netapp	linux_kernel cloud_backup	A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of …	-	CVE-2021-20226	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197438	9.8	CRITICAL Network	mitsubishielectric	melfa-works rt_toolbox2 ezsocket fr_configurator fr_configurator_sw3 gx_configurator-dp gx_configurator-qp gx_explorer gx_iec_developer gx_works2 gx_works3 m_commdtm-…	Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-20588	2024-11-21 14:46	2021-02-20	Show	GitHub Exploit DB Packet Storm

197439	9.8	CRITICAL Network	mitsubishielectric	melfa-works rt_toolbox2 ezsocket fr_configurator fr_configurator_sw3 gx_configurator-dp gx_configurator-qp gx_explorer gx_iec_developer gx_works2 gx_works3 m_commdtm-…	Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Da…	CWE-787 Out-of-bounds Write	CVE-2021-20587	2024-11-21 14:46	2021-02-20	Show	GitHub Exploit DB Packet Storm

197440	5.4	MEDIUM Network	ibm	maximo_for_civil_infrastructure	IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional…	CWE-79 Cross-site Scripting	CVE-2021-20446	2024-11-21 14:46	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed