Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231301 7.5 危険 phpmyquote - phpMyQuote の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4835 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
231302 7.5 危険 phprealty - phpRealty における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4834 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
231303 2.6 注意 torrenttrader - TorrentTrader の account_settings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4831 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
231304 7.5 危険 sisfo kampus - Sisfo Kampus 2006 の blanko.preview.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4820 2012-12-20 18:33 2007-09-11 Show GitHub Exploit DB Packet Storm
231305 4.3 警告 txx cms - Txx CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4819 2012-12-20 18:33 2007-09-11 Show GitHub Exploit DB Packet Storm
231306 7.5 危険 txx cms - Txx CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4818 2012-12-20 18:33 2007-09-11 Show GitHub Exploit DB Packet Storm
231307 7.5 危険 tlm cms - TLM CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4808 2012-12-20 18:33 2007-09-11 Show GitHub Exploit DB Packet Storm
231308 5 警告 ソフォス - Sophos Anti-Virus のウィルス検出エンジンにおけるマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4787 2012-12-20 18:33 2007-09-10 Show GitHub Exploit DB Packet Storm
231309 7.5 危険 tim jackson - PHPOF の dbmodules/DB_adodb.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4763 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
231310 7.5 危険 phpmytourney - phpMytourney の menu.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4757 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199951 8.8 HIGH
Network 		centreon centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_rem… CWE-78
OS Command  		CVE-2020-9463 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
199952 6.1 MEDIUM
Network 		gwtupload_project gwtupload There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which wo… CWE-79
Cross-site Scripting 		CVE-2020-9447 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
199953 7.8 HIGH
Local 		openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dl… CWE-281
 Improper Preservation of Permissions 		CVE-2020-9442 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199954 5.5 MEDIUM
Local 		avast antivirus_for_linux
antivirus_pro_plus
antivirus_pro 		The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. CWE-436
 Interpretation Conflict 		CVE-2020-9399 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199955 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9434 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199956 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9433 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199957 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9432 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199958 7.5 HIGH
Network 		wireshark
opensuse
fedoraproject
debian 		wireshark
leap
fedora
debian_linux 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operation… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-9431 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199959 7.5 HIGH
Network 		wireshark
fedoraproject
opensuse
debian 		wireshark
fedora
leap
debian_linux 		In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field. CWE-20
 Improper Input Validation  		CVE-2020-9430 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
199960 7.5 HIGH
Network 		wireshark
opensuse 		wireshark
leap 		In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a… CWE-476
 NULL Pointer Dereference 		CVE-2020-9429 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm