Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231351	6	警告	WordPress.org	-	WordPress のデフォルトテーマの functions.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3238	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231352	6.8	警告	XOOPS	-	XOOPS 用の TinyContent モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3237	2012-12-20 18:19	2007-06-12	Show	GitHub Exploit DB Packet Storm

231353	7.5	危険	XOOPS	-	XOOPS 用の Horoscope モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3236	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231354	5	警告	tec-it	-	TEC-IT TBarCode OCX ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	-	CVE-2007-3233	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231355	6.8	警告	simian systems inc	-	Idan Sofer PHP::HTML の phphtml.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3230	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231356	6.8	警告	singapore	-	Singapore Gallery の index.php における重要な情報を取得される脆弱性	-	CVE-2007-3229	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231357	6.8	警告	simian systems inc	-	Sitellite CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3228	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231358	4.3	警告	Ruby on Rails project	-	Ruby on Rails の to_json 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-3227	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

231359	6.4	警告	サン・マイクロシステムズ	-	slapd における特定のデータを変更される脆弱性	-	CVE-2007-3225	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

231360	5	警告	サン・マイクロシステムズ	-	slapd におけるエントリの属性の存在を特定される脆弱性	-	CVE-2007-3224	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197831	9.1	CRITICAL Network	lua-openssl_project	lua-openssl	openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.	CWE-295 Improper Certificate Validation	CVE-2020-9432	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197832	7.5	HIGH Network	wireshark opensuse fedoraproject debian	wireshark leap fedora debian_linux	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operation…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-9431	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197833	7.5	HIGH Network	wireshark fedoraproject opensuse debian	wireshark fedora leap debian_linux	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.	CWE-20 Improper Input Validation	CVE-2020-9430	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197834	7.5	HIGH Network	wireshark opensuse	wireshark leap	In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a…	CWE-476 NULL Pointer Dereference	CVE-2020-9429	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197835	7.5	HIGH Network	wireshark debian fedoraproject opensuse	wireshark debian_linux fedora leap	In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.	CWE-125 Out-of-bounds Read	CVE-2020-9428	2024-11-21 14:40	2020-02-28	Show	GitHub Exploit DB Packet Storm

197836	7.5	HIGH Network	pureftpd debian fedoraproject canonical	pure-ftpd debian_linux fedora extra_packages_for_enterprise_linux ubuntu_linux	An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) fu…	CWE-824 Access of Uninitialized Pointer	CVE-2020-9274	2024-11-21 14:40	2020-02-27	Show	GitHub Exploit DB Packet Storm

197837	6.5	MEDIUM Network	golfbuddyglobal	course_manager	In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.	CWE-200 CWE-326 Information Exposure Inadequate Encryption Strength	CVE-2020-9337	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197838	5.3	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-9407	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197839	9.8	CRITICAL Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.	CWE-94 Code Injection	CVE-2020-9406	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

197840	6.1	MEDIUM Network	iblsoft	online_weather	IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.	CWE-79 Cross-site Scripting	CVE-2020-9405	2024-11-21 14:40	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed