Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231421	7.5	危険	phpbasic	-	phpBasic の Music モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5678	2012-12-20 18:33	2007-10-24	Show	GitHub Exploit DB Packet Storm

231422	7.5	危険	reloadcms	-	ReloadCMS の system.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5650	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231423	4.3	警告	rnote	-	rNote の rnote.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5648	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231424	4.3	警告	socketkb	-	SocketKB の social_game_play.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5647	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231425	6.8	警告	phppm	-	PHP Project Management におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5642	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231426	6.8	警告	phppm	-	PHP Project Management における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5641	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231427	10	危険	The Support Incident Tracker Project	-	Salford Software SiT! における脆弱性	CWE-noinfo 情報不足	CVE-2007-5635	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231428	6.8	警告	towels	-	TOWels の src/scripture.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5628	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231429	6.8	警告	Creative Digital Resources	-	SocketMail の content/fnc-readmail3.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5627	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

231430	4.3	警告	simongibson	-	ASP Site Search SearchSimon Lite の filename.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5625	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212361	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerabili…	NVD-CWE-noinfo	CVE-2020-1185	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212362	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerabili…	NVD-CWE-noinfo	CVE-2020-1184	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212363	6.5	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1179	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212364	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1176	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212365	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1175	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212366	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1174	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212367	6.8	MEDIUM Network	microsoft	power_bi_report_server	A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'.	CWE-20 Improper Input Validation	CVE-2020-1173	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212368	8.8	HIGH Network	microsoft	visual_studio_code	A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Ex…	NVD-CWE-noinfo	CVE-2020-1171	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212369	7.8	HIGH Local	microsoft	windows_server_2016 windows_10	An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique …	NVD-CWE-noinfo	CVE-2020-1166	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

212370	7.8	HIGH Local	microsoft	windows_server_2016 windows_10	An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique …	NVD-CWE-noinfo	CVE-2020-1165	2024-11-21 14:09	2020-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed