Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231511 7.5 危険 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 - CVE-2007-2549 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231512 6.4 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における脆弱性 - CVE-2007-2548 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231513 4.3 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2547 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231514 6.8 警告 Simple Machines - SMF におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2546 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231515 7.5 危険 XOOPS - XOOPS 用の Flashgames モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2543 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231516 7.5 危険 workbench survival guide - workbench survival guide の header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2542 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231517 7.5 危険 versado cms - Versado CMS の includes/ajax_listado.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2541 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231518 7.5 危険 pmecms - PMECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2540 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231519 7.8 危険 runcms - RunCms の show_files 関数における重要な情報 (ファイルの存在およびファイルメタデータ) を取得される脆弱性 - CVE-2007-2539 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231520 7.5 危険 runcms - RunCms の class/debug/debug_show.php における SQL インジェクションの脆弱性 - CVE-2007-2538 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212161 5.4 MEDIUM
Network 		verbb comments An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. CWE-79
Cross-site Scripting 		CVE-2020-13869 2024-11-21 14:02 2020-06-6 Show GitHub Exploit DB Packet Storm
212162 6.5 MEDIUM
Network 		verbb comments An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. CWE-352
 Origin Validation Error 		CVE-2020-13868 2024-11-21 14:02 2020-06-6 Show GitHub Exploit DB Packet Storm
212163 5.5 MEDIUM
Local 		targetcli-fb_project
fedoraproject 		targetcli-fb
fedora 		Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup directory and backup files). CWE-276
Incorrect Default Permissions  		CVE-2020-13867 2024-11-21 14:02 2020-06-6 Show GitHub Exploit DB Packet Storm
212164 7.5 HIGH
Network 		mqtt mqtt The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the abili… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13849 2024-11-21 14:02 2020-06-5 Show GitHub Exploit DB Packet Storm
212165 8.1 HIGH
Network 		loadbalancer enterprise_va_max The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and… CWE-22
Path Traversal 		CVE-2020-13377 2024-11-21 14:01 2023-05-12 Show GitHub Exploit DB Packet Storm
212166 8.8 HIGH
Network 		loadbalancer enterprise_va_max Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code. CWE-78
OS Command  		CVE-2020-13378 2024-11-21 14:01 2023-05-12 Show GitHub Exploit DB Packet Storm
212167 7.2 HIGH
Network 		rukovoditel rukovoditel Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An … CWE-89
SQL Injection 		CVE-2020-13590 2024-11-21 14:01 2022-04-19 Show GitHub Exploit DB Packet Storm
212168 9.8 CRITICAL
Network 		open-emr
phpgacl_project 		openemr
phpgacl 		Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability. CWE-89
SQL Injection 		CVE-2020-13567 2024-11-21 14:01 2022-04-19 Show GitHub Exploit DB Packet Storm
212169 5.5 MEDIUM
Local 		pixar openusd An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access th… CWE-787
 Out-of-bounds Write 		CVE-2020-13495 2024-11-21 14:01 2022-04-19 Show GitHub Exploit DB Packet Storm
212170 7.5 HIGH
Network 		drupal drupal Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API modul… NVD-CWE-Other
CVE-2020-13677 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm