Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231731 5 警告 Gilles Vollant - WinImage におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-4964 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231732 9.3 危険 Gilles Vollant - WinImage におけるコピー先のファイル名を偽造される脆弱性 CWE-Other
その他
CVE-2007-4963 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231733 9.3 危険 Gilles Vollant - WinImage におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4962 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231734 4.3 警告 TinyWebGallery - TWG におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4958 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231735 7.5 危険 simpcms - SimpCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4953 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231736 5.1 警告 webmedia explorer - webmex における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4948 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231737 6.8 警告 phpffl - phpFFL における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4935 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231738 4.6 警告 phpffl - phpFFL における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4934 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231739 7.5 危険 shop-script - Shop-Script の includes/admin/sub/conf_appearence.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2007-4933 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
231740 7.5 危険 shop-script - Shop-Script の admin.php における admin パネルへアクセスされる脆弱性 CWE-20
不適切な入力確認
CVE-2007-4932 2012-12-20 18:33 2007-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210891 9.8 CRITICAL
Network
flowpaper pdf2json pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. CWE-787
 Out-of-bounds Write
CVE-2020-23878 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210892 9.8 CRITICAL
Network
science-miner pdf2xml pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream. CWE-787
 Out-of-bounds Write
CVE-2020-23877 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210893 7.5 HIGH
Network
science-miner pdf2xml pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-23876 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210894 9.8 CRITICAL
Network
science-miner pdf2xml pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode. CWE-787
 Out-of-bounds Write
CVE-2020-23874 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210895 9.8 CRITICAL
Network
science-miner pdf2xml pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump. CWE-787
 Out-of-bounds Write
CVE-2020-23873 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210896 7.5 HIGH
Network
science-miner pdf2xml A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS). CWE-476
 NULL Pointer Dereference
CVE-2020-23872 2024-11-21 14:14 2021-11-11 Show GitHub Exploit DB Packet Storm
210897 9.8 CRITICAL
Network
eyoucms eyoucms SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php. CWE-89
SQL Injection
CVE-2020-24000 2024-11-21 14:14 2021-11-4 Show GitHub Exploit DB Packet Storm
210898 9.6 CRITICAL
Network
php-fusion phpfusion Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature. CWE-79
Cross-site Scripting
CVE-2020-23754 2024-11-21 14:14 2021-11-3 Show GitHub Exploit DB Packet Storm
210899 9.6 CRITICAL
Network
zibbs_project zibbs Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter. CWE-79
Cross-site Scripting
CVE-2020-23719 2024-11-21 14:14 2021-11-3 Show GitHub Exploit DB Packet Storm
210900 9.6 CRITICAL
Network
zibbs_project zibbs Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php. CWE-79
Cross-site Scripting
CVE-2020-23718 2024-11-21 14:14 2021-11-3 Show GitHub Exploit DB Packet Storm