Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231231 7.5 危険 portail web php - Guernion Sylvain Portail Web Php の includes/includes.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0699 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
231232 7.5 危険 phpbb tweaked - Phpbb Tweaked の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0680 2012-12-20 18:19 2007-02-2 Show GitHub Exploit DB Packet Storm
231233 4.6 警告 TWiki - Twiki における任意の Perl コードを実行される脆弱性 - CVE-2007-0669 2012-12-20 18:19 2007-01-28 Show GitHub Exploit DB Packet Storm
231234 7.5 危険 phpbb2-modificat - phpBB2-MODificat の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0656 2012-12-20 18:19 2007-02-1 Show GitHub Exploit DB Packet Storm
231235 9.3 危険 x multimedia system - xmms における整数アンダーフローの脆弱性 - CVE-2007-0654 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231236 9.3 危険 x multimedia system - xmms における整数オーバーフローの脆弱性 - CVE-2007-0653 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231237 7.5 危険 rbl - Raymond BERTHOU script collection の tForum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0642 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
231238 7.5 危険 shaffer solutions corp - SSC DiskAccess NFS Client の EnumPrintersA 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-0641 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
231239 10 危険 Zabbix - ZABBIX におけるバッファオーバーフローの脆弱性 - CVE-2007-0640 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
231240 5 警告 vlad alexa mancini - Vlad Alexa Mancini PHPFootball の show.php における重要な情報を取得される脆弱性 - CVE-2007-0638 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211461 5.4 MEDIUM
Network 		themeboy sportspress The SportsPress plugin before 2.7.2 for WordPress allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-13892 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
211462 4.8 MEDIUM
Network 		opencart opencart OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists becau… CWE-79
Cross-site Scripting 		CVE-2020-13980 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211463 7.2 HIGH
Network 		monstra monstra_cms Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the … CWE-78
OS Command  		CVE-2020-13978 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211464 4.9 MEDIUM
Network 		nagios
fedoraproject 		nagios
fedora 		Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of t… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2020-13977 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211465 8.8 HIGH
Network 		dd-wrt dd-wrt An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation… CWE-78
OS Command  		CVE-2020-13976 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211466 7.8 HIGH
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-13974 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211467 6.1 MEDIUM
Network 		owasp json-sanitizer OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as Ja… CWE-79
Cross-site Scripting 		CVE-2020-13973 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211468 6.1 MEDIUM
Network 		roundcube
debian
fedoraproject 		webmail
debian_linux
fedora 		An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview. CWE-79
Cross-site Scripting 		CVE-2020-13965 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211469 6.1 MEDIUM
Network 		roundcube
fedoraproject
debian 		webmail
fedora
debian_linux 		An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allows XSS via the username template object. CWE-79
Cross-site Scripting 		CVE-2020-13964 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
211470 7.5 HIGH
Network 		mumble
qt
fedoraproject
opensuse 		mumble
qt
fedora
leap 		Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors le… NVD-CWE-noinfo
CVE-2020-13962 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm