Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231541	6.8	警告	ruben boelinger	-	WordPress 用の wp-Table プラグインにおけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2483	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

231542	6.8	警告	ruben boelinger	-	WordPress 用の wordTube プラグインにおけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2482	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

231543	6.8	警告	ruben boelinger	-	WordPress 用の wordTube プラグインの wordtube-button.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2481	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

231544	7.5	危険	turnkey web tools	-	Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2474	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

231545	4.3	警告	sendcard	-	Sendcard の sendcard.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2472	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

231546	5	警告	sendcard	-	Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2471	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

231547	4.9	警告	zonelabs	-	ZoneAlarm におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2467	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

231548	7.8	危険	サン・マイクロシステムズ	-	Sun Java System Directory Server および Sun ONE Directory Server で使用されている C 用の LDAP SDK におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2466	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

231549	7.8	危険	tony cook	-	Imager perl モジュールの BMP リーダにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2459	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

231550	7.5	危険	pixaria	-	Pixaria Gallery における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2458	2012-12-20 18:19	2007-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211111	9.8	CRITICAL Network	apache	nuttx	Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offs…	CWE-787 Out-of-bounds Write	CVE-2020-17529	2024-11-21 14:08	2020-12-10	Show	GitHub Exploit DB Packet Storm

211112	9.1	CRITICAL Network	apache	nuttx	Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer …	CWE-787 Out-of-bounds Write	CVE-2020-17528	2024-11-21 14:08	2020-12-10	Show	GitHub Exploit DB Packet Storm

211113	9.8	CRITICAL Network	apache	tapestry	A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deseria…	-	CVE-2020-17531	2024-11-21 14:08	2020-12-8	Show	GitHub Exploit DB Packet Storm

211114	5.5	MEDIUM Local	apache netapp oracle	groovy snapcenter primavera_unifier ilearning business_process_management_suite agile_plm retail_bulk_data_integration communications_services_gatekeeper retail_merchandising_…	Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method c…	NVD-CWE-Other	CVE-2020-17521	2024-11-21 14:08	2020-12-8	Show	GitHub Exploit DB Packet Storm

211115	7.5	HIGH Network	apache netapp debian oracle	tomcat oncommand_system_manager element_plug-in debian_linux instantis_enterprisetrack sd-wan_edge workload_manager mysql_enterprise_monitor communications_cloud_native_core_b…	While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream re…	CWE-200 Information Exposure	CVE-2020-17527	2024-11-21 14:08	2020-12-4	Show	GitHub Exploit DB Packet Storm

211116	6.5	MEDIUM Network	pbootcms	pbootcms	Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.	CWE-352 Origin Validation Error	CVE-2020-17901	2024-11-21 14:08	2020-12-1	Show	GitHub Exploit DB Packet Storm

211117	5.3	MEDIUM Network	untangle	untangle_firewall_ng	Untangle Firewall NG before 16.0 uses MD5 for passwords.	CWE-326 Inadequate Encryption Strength	CVE-2020-17494	2024-11-21 14:08	2020-11-13	Show	GitHub Exploit DB Packet Storm

211118	5.5	MEDIUM Local	saltstack debian	salt debian_linux	The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-17490	2024-11-21 14:08	2020-11-6	Show	GitHub Exploit DB Packet Storm

211119	9.8	CRITICAL Network	apache debian	shiro debian_linux	Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.	CWE-287 Improper Authentication	CVE-2020-17510	2024-11-21 14:08	2020-11-6	Show	GitHub Exploit DB Packet Storm

211120	9.6	CRITICAL Network	antsword_project	antsword	A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.	CWE-79 Cross-site Scripting	CVE-2020-18766	2024-11-21 14:08	2020-10-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed