Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231141 7.5 危険 XOOPS - Xoops 用の Articles モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3311 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
231142 4.3 警告 tdizin - TDizin の arama.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3310 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231143 7.5 危険 Simple Machines - SMF におけるメッセージの作成時に任意の PHP コードを実行され脆弱性 - CVE-2007-3309 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231144 7.5 危険 Simple Machines - SMF における CAPTCHA テストを通過される脆弱性 - CVE-2007-3308 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231145 7.5 危険 solar empire - Solar Empire の game_listing.php における SQL インジェクションの脆弱性 - CVE-2007-3307 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231146 7.5 危険 ultrize - MiniBill の crontab/run_billing.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3306 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231147 7.5 危険 spey - Spey における SQL インジェクションの脆弱性 - CVE-2007-3298 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231148 9.3 危険 迅雷 - xunlei Web Thunderbolt の ThunderServer.webThunder.1 ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 - CVE-2007-3296 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231149 6.5 警告 yabb - YaBB におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3295 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
231150 7.5 危険 XOOPS - XOOPS 用の WiwiMod モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3289 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197831 9.1 CRITICAL
Network
lua-openssl_project lua-openssl openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation 
CVE-2020-9432 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197832 7.5 HIGH
Network
wireshark
opensuse
fedoraproject
debian
wireshark
leap
fedora
debian_linux
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operation… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-9431 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197833 7.5 HIGH
Network
wireshark
fedoraproject
opensuse
debian
wireshark
fedora
leap
debian_linux
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field. CWE-20
 Improper Input Validation 
CVE-2020-9430 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197834 7.5 HIGH
Network
wireshark
opensuse
wireshark
leap
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a… CWE-476
 NULL Pointer Dereference
CVE-2020-9429 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197835 7.5 HIGH
Network
wireshark
debian
fedoraproject
opensuse
wireshark
debian_linux
fedora
leap
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing. CWE-125
Out-of-bounds Read
CVE-2020-9428 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
197836 7.5 HIGH
Network
pureftpd
debian
fedoraproject
canonical
pure-ftpd
debian_linux
fedora
extra_packages_for_enterprise_linux
ubuntu_linux
An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) fu… CWE-824
 Access of Uninitialized Pointer
CVE-2020-9274 2024-11-21 14:40 2020-02-27 Show GitHub Exploit DB Packet Storm
197837 6.5 MEDIUM
Network
golfbuddyglobal course_manager In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request. CWE-200
CWE-326
Information Exposure
Inadequate Encryption Strength
CVE-2020-9337 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197838 5.3 MEDIUM
Network
iblsoft online_weather IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2020-9407 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197839 9.8 CRITICAL
Network
iblsoft online_weather IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. CWE-94
Code Injection
CVE-2020-9406 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm
197840 6.1 MEDIUM
Network
iblsoft online_weather IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. CWE-79
Cross-site Scripting
CVE-2020-9405 2024-11-21 14:40 2020-02-26 Show GitHub Exploit DB Packet Storm