Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231651 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231652 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231653 7.5 危険 wf-sections
XOOPS
- Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
231654 4.3 警告 sam crew - Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1969 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231655 6.8 警告 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1968 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231656 7.5 危険 XOOPS - XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1962 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231657 7.5 危険 phpBB - phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1961 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231658 7.5 危険 XOOPS - XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1960 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231659 10 危険 tinymux - TinyMUX の command.cpp における脆弱性 - CVE-2007-1959 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
231660 5 警告 tinymux - TinyMUX におけるバッファオーバーフローの脆弱性 - CVE-2007-1958 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211951 4.3 MEDIUM
Network
atlassian jira_service_desk Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Informa… NVD-CWE-noinfo
CVE-2020-14180 2024-11-21 14:02 2020-09-21 Show GitHub Exploit DB Packet Storm
211952 5.3 MEDIUM
Network
atlassian jira_server
jira_data_center
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /… NVD-CWE-noinfo
CVE-2020-14179 2024-11-21 14:02 2020-09-21 Show GitHub Exploit DB Packet Storm
211953 6.5 MEDIUM
Network
atlassian jira_server Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service (DoS) vulnerability in JQL version searc… NVD-CWE-noinfo
CVE-2020-14177 2024-11-21 14:02 2020-09-21 Show GitHub Exploit DB Packet Storm
211954 7.5 HIGH
Network
ozeki ozeki_ng_sms_gateway An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe manner. This opens the application to an XML External Entity attack that can be … CWE-611
XXE
CVE-2020-14029 2024-11-21 14:02 2020-09-19 Show GitHub Exploit DB Packet Storm
211955 4.9 MEDIUM
Network
ozeki ozeki_ng_sms_gateway An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any … NVD-CWE-noinfo
CVE-2020-14021 2024-11-21 14:02 2020-09-19 Show GitHub Exploit DB Packet Storm
211956 6.1 MEDIUM
Network
apache airflow In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. CWE-79
Cross-site Scripting
CVE-2020-13944 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm
211957 5.3 MEDIUM
Network
atlassian jira
data_center
jira_server
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affect… CWE-200
Information Exposure
CVE-2020-14181 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm
211958 8.8 HIGH
Network
apache superset While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary … NVD-CWE-noinfo
CVE-2020-13948 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm
211959 8.8 HIGH
Network
istio-operator_project istio-operator An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cl… CWE-862
 Missing Authorization
CVE-2020-14306 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm
211960 6.1 MEDIUM
Network
apache atlas Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability. CWE-79
Cross-site Scripting
CVE-2020-13928 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm