Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231481 7.5 危険 w1l3d4 - W1L3D4 Philboard の W1L3D4_bolum.asp における SQL インジェクションの脆弱性 - CVE-2007-2641 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
231482 10 危険 prosysinfo - TFTPdWin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2639 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
231483 10 危険 positive software - H-Sphere SiteStudio におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2633 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
231484 7.5 危険 SquirrelMail Project - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2631 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
231485 6.8 警告 WordPress.org - WordPress の sidebar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2627 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
231486 7.5 危険 taskdriver - TaskDriver における SQL インジェクションの脆弱性 - CVE-2007-2622 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
231487 4.6 警告 シマンテック - Symantec pcAnywhere における資格情報を取得される脆弱性 - CVE-2007-2619 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
231488 2.1 注意 サン・マイクロシステムズ - Sun Solaris の SRS Net Connect Software Proxy Core パッケージにおける任意のファイルの最初の行を読まれる脆弱性 - CVE-2007-2617 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
231489 7.5 危険 phphtmllib - phpHtmlLib の examples/widget8.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2614 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
231490 8.3 危険 Wikka Development Team - WikkaWiki における任意の設定ファイルをアップロードされる脆弱性 - CVE-2007-2613 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212121 7.5 HIGH
Network
meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2020-13900 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212122 7.5 HIGH
Network
meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory. CWE-908
 Use of Uninitialized Resource
CVE-2020-13899 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212123 7.5 HIGH
Network
meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2020-13898 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212124 7.8 HIGH
Local
irfanview irfanview IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. NVD-CWE-noinfo
CVE-2020-13906 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212125 8.8 HIGH
Network
irfanview irfanview IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. NVD-CWE-noinfo
CVE-2020-13905 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212126 5.4 MEDIUM
Network
enhancesoft osticket scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. CWE-79
Cross-site Scripting
CVE-2020-14012 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212127 6.1 MEDIUM
Network
laborator xenon The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter. CWE-79
Cross-site Scripting
CVE-2020-14010 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
212128 8.8 HIGH
Network
j2store j2store The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. CWE-89
SQL Injection
CVE-2020-13996 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
212129 5.4 MEDIUM
Network
your_online_shop_project your_online_shop Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. CWE-79
Cross-site Scripting
CVE-2020-13911 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
212130 8.8 HIGH
Adjacent
royalapps royal_ts Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-13872 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm