Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231411 6.8 警告 szymon kosok - Szymon Kosok Best Top List の banner-upload.php における banners/ 配下の任意の PHP ファイルを実行される脆弱性 - CVE-2007-4376 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231412 4 警告 rndlabs - Babo Violent におけるメッセージを偽造される脆弱性 - CVE-2007-4374 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231413 6.8 警告 rndlabs - Babo Violent のサーバにおける認証を回避される脆弱性 - CVE-2007-4373 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
231414 7.5 危険 racer - Racer の client などにおけるバッファオーバーフローの脆弱性 - CVE-2007-4370 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231415 5 警告 sote - SOTEeSKLEP の go/_files におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4369 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231416 5 警告 wengo - WengoPhone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4366 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231417 6.8 警告 prozilla - Prozilla Webring の category.php における SQL インジェクションの脆弱性 - CVE-2007-4362 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231418 6.8 警告 skilmatch staffing systems - SkilMatch Staffing Systems JobLister3 における SQL インジェクションの脆弱性 - CVE-2007-4359 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231419 4.3 警告 zoidcom - Zoidcom におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4358 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
231420 7.5 危険 phpcentral - PHPCentral Login の include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4342 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212281 9.1 CRITICAL
Network 		get-simple getsimplecms GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php CWE-22
Path Traversal 		CVE-2020-18191 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
212282 9.1 CRITICAL
Network 		bludit bludit Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture. CWE-22
Path Traversal 		CVE-2020-18190 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
212283 9.8 CRITICAL
Network 		pluxml pluxml class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. CWE-94
Code Injection 		CVE-2020-18185 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
212284 7.2 HIGH
Network 		pluxxml pluxxml In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template. NVD-CWE-noinfo
CVE-2020-18184 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
212285 4.3 MEDIUM
Network 		powerdns authoritative An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialize… CWE-908
 Use of Uninitialized Resource 		CVE-2020-17482 2024-11-21 14:08 2020-10-2 Show GitHub Exploit DB Packet Storm
212286 7.5 HIGH
Network 		nec expresscluster_x This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The spe… - CVE-2020-17408 2024-11-21 14:08 2020-09-11 Show GitHub Exploit DB Packet Storm
212287 5.4 MEDIUM
Network 		fabbricadigitale multiux A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field. CWE-79
Cross-site Scripting 		CVE-2020-17458 2024-11-21 14:08 2020-09-2 Show GitHub Exploit DB Packet Storm
212288 8.8 HIGH
Adjacent 		senstar symphony This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The… - CVE-2020-17405 2024-11-21 14:08 2020-09-2 Show GitHub Exploit DB Packet Storm
212289 6.1 MEDIUM
Network 		forgerock identity_manager Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6. CWE-79
Cross-site Scripting 		CVE-2020-17465 2024-11-21 14:08 2020-09-1 Show GitHub Exploit DB Packet Storm
212290 5.4 MEDIUM
Network 		halo halo Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser. CWE-79
Cross-site Scripting 		CVE-2020-19007 2024-11-21 14:08 2020-08-26 Show GitHub Exploit DB Packet Storm