Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231441 4.3 警告 PHPNUKE - PHP-Nuke の Search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4212 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231442 7.5 危険 redline software - la-nai CMS の module.php における SQL インジェクションの脆弱性 - CVE-2007-4210 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231443 4.3 警告 The Sleuth Kit - Brian Carrier TSK の ext2fs.c におけるサービス運用妨害 (DoS) 脆弱性 - CVE-2007-4195 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231444 5 警告 TIBCO Software - TIBCO RV クライアントのデフォルト設定におけるメッセージの内容をキャプチャされる脆弱性 - CVE-2007-4160 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231445 5 警告 TIBCO Software - TIBCO RV の特定のデーモンにおけるユーザ名などの重要な情報を取得される脆弱性 - CVE-2007-4159 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231446 7.8 危険 TIBCO Software - TIBCO rvd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-4158 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231447 5 警告 phpblogger - PHPBlogger における admin パスワードハッシュを含むデータベースをダウンロードされる脆弱性 - CVE-2007-4157 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231448 7.5 危険 woliocms - wolioCMS における SQL インジェクションの脆弱性 - CVE-2007-4156 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231449 6.5 警告 WordPress.org - WordPress の options.php における SQL インジェクションの脆弱性 - CVE-2007-4154 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231450 2.1 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4153 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210941 5.4 MEDIUM
Network 		otrs otrs The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS… CWE-613
 Insufficient Session Expiration 		CVE-2020-1768 2024-11-21 14:11 2020-02-8 Show GitHub Exploit DB Packet Storm
210942 8.1 HIGH
Network 		apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. Th… CWE-78
OS Command  		CVE-2020-1931 2024-11-21 14:11 2020-01-31 Show GitHub Exploit DB Packet Storm
210943 8.1 HIGH
Network 		apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-1180… CWE-78
OS Command  		CVE-2020-1930 2024-11-21 14:11 2020-01-31 Show GitHub Exploit DB Packet Storm
210944 7.5 HIGH
Network 		apache jackrabbit_oak The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability. The code mandates… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2020-1940 2024-11-21 14:11 2020-01-29 Show GitHub Exploit DB Packet Storm
210945 6.1 MEDIUM
Network 		apache nifi A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in othe… CWE-79
Cross-site Scripting 		CVE-2020-1933 2024-11-21 14:11 2020-01-28 Show GitHub Exploit DB Packet Storm
210946 6.5 MEDIUM
Network 		apache superset An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pa… NVD-CWE-noinfo
CVE-2020-1932 2024-11-21 14:11 2020-01-28 Show GitHub Exploit DB Packet Storm
210947 5.3 MEDIUM
Network 		apache nifi An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a s… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-1928 2024-11-21 14:11 2020-01-28 Show GitHub Exploit DB Packet Storm
210948 5.5 MEDIUM
Local 		huawei honor_v30_firmware Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications do not properly validate the identity of another applicati… CWE-287
Improper Authentication 		CVE-2020-1788 2024-11-21 14:11 2020-01-22 Show GitHub Exploit DB Packet Storm
210949 6.0 MEDIUM
Local 		huawei mate_20_firmware HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to… CWE-287
Improper Authentication 		CVE-2020-1840 2024-11-21 14:11 2020-01-22 Show GitHub Exploit DB Packet Storm
210950 7.5 HIGH
Network 		apache beam The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables t… CWE-295
Improper Certificate Validation  		CVE-2020-1929 2024-11-21 14:11 2020-01-16 Show GitHub Exploit DB Packet Storm