Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245241 5 警告 freeproxy - FreeProxy におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0838 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245242 7.5 危険 agermenu - AgerMenu の examples/inc/top.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0837 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245243 4 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のローカルファイルをインクルードされる脆弱性 - CVE-2007-0836 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245244 6.5 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のシェルコマンドを実行される脆弱性 - CVE-2007-0835 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245245 6.8 警告 darrens 5-dollar script archive - FlashChat におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0834 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245246 4.4 警告 AVAST Software s.r.o. - avast! Server Edition における認証要件が回避される脆弱性 - CVE-2007-0829 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245247 6.8 警告 alibaba - Alibaba Alipay の PTA.DLL における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2007-0827 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245248 7.8 危険 FlashFXP - FlashFXP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0825 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245249 5 警告 cedric - Cedric CLAIRE PortailPhp におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0821 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
245250 7.5 危険 cedric - Cedric CLAIRE PortailPhp における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0820 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219651 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI. CWE-79
Cross-site Scripting
CVE-2019-20520 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219652 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address. CWE-79
Cross-site Scripting
CVE-2019-20519 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219653 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI. CWE-79
Cross-site Scripting
CVE-2019-20518 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219654 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI. CWE-79
Cross-site Scripting
CVE-2019-20517 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219655 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI. CWE-79
Cross-site Scripting
CVE-2019-20516 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219656 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI. CWE-79
Cross-site Scripting
CVE-2019-20515 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219657 6.1 MEDIUM
Network
frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI. CWE-79
Cross-site Scripting
CVE-2019-20514 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219658 6.1 MEDIUM
Network
edx open_edx Open edX Ironwood.1 allows support/certificates?user= reflected XSS. CWE-79
Cross-site Scripting
CVE-2019-20513 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219659 6.1 MEDIUM
Network
igniterealtime openfire Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter. CWE-79
Cross-site Scripting
CVE-2019-20527 2024-11-21 13:38 2020-03-19 Show GitHub Exploit DB Packet Storm
219660 6.1 MEDIUM
Network
ilch ilch_cms ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter. CWE-79
Cross-site Scripting
CVE-2019-20524 2024-11-21 13:38 2020-03-19 Show GitHub Exploit DB Packet Storm