Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231161	8.5	危険	php-stats	-	Php-Stats における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5453	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231162	10	危険	php-stats	-	Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5452	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231163	7.5	危険	softbiz	-	Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5449	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231164	1.9	注意	VMware	-	VMware Workstation などの Reconfig.DLL における vmount2.exe がサービス運用妨害 (DoS) 状態となる脆弱性	CWE-20 不適切な入力確認	CVE-2007-5438	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231165	4.3	警告	pro.setun	-	PRO-search におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5434	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231166	4.3	警告	siteup	-	Site-Up の index.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5433	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231167	7.5	危険	scottmanktelow	-	Stride における管理者権限を取得される脆脆弱性	CWE-200 情報漏えい	CVE-2007-5432	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231168	7.5	危険	scottmanktelow	-	Stride における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5430	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231169	4.3	警告	Umisoft	-	UMI CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5428	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231170	7.5	危険	Tiki Software Community Association	-	TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5423	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197431	8.8	HIGH Network	redhat	openshift_container_platform	A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to t…	-	CVE-2021-20182	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197432	7.4	HIGH Network	mbsync_project debian fedoraproject	mbsync debian_linux fedora extra_packages_for_enterprise_linux	A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailb…	CWE-22 Path Traversal	CVE-2021-20247	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197433	4.3	MEDIUM Network	postgresql redhat fedoraproject	postgresql enterprise_linux software_collections fedora	A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat …	-	CVE-2021-20229	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197434	4.8	MEDIUM Network	redhat netapp	undertow oncommand_workflow_automation active_iq_unified_manager	A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid c…	CWE-444 HTTP Request Smuggling	CVE-2021-20220	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197435	8.1	HIGH Network	redhat	openshift_installer	A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned…	-	CVE-2021-20198	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197436	7.5	HIGH Network	stunnel	stunnel	A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a cert…	-	CVE-2021-20230	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197437	7.8	HIGH Local	linux netapp	linux_kernel cloud_backup	A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of …	-	CVE-2021-20226	2024-11-21 14:46	2021-02-24	Show	GitHub Exploit DB Packet Storm

197438	9.8	CRITICAL Network	mitsubishielectric	melfa-works rt_toolbox2 ezsocket fr_configurator fr_configurator_sw3 gx_configurator-dp gx_configurator-qp gx_explorer gx_iec_developer gx_works2 gx_works3 m_commdtm-…	Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-20588	2024-11-21 14:46	2021-02-20	Show	GitHub Exploit DB Packet Storm

197439	9.8	CRITICAL Network	mitsubishielectric	melfa-works rt_toolbox2 ezsocket fr_configurator fr_configurator_sw3 gx_configurator-dp gx_configurator-qp gx_explorer gx_iec_developer gx_works2 gx_works3 m_commdtm-…	Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Da…	CWE-787 Out-of-bounds Write	CVE-2021-20587	2024-11-21 14:46	2021-02-20	Show	GitHub Exploit DB Packet Storm

197440	5.4	MEDIUM Network	ibm	maximo_for_civil_infrastructure	IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional…	CWE-79 Cross-site Scripting	CVE-2021-20446	2024-11-21 14:46	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed