Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245491 6.4 警告 geoip - GeoIP の libGeoIP/GeoIPUpdate.c におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0159 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245492 7.5 危険 adam jarret - AJLogin におけるパスワードを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0153 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245493 7.5 危険 dayfox designs - Dayfox Blog の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0150 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245494 7.5 危険 ememberspro - EMembersPro におけるパスワードを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0149 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245495 5 警告 cuyahoga - Cuyahoga におけるファイルをアップロードされる脆弱性 - CVE-2007-0147 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245496 6 警告 fix and chips computer services - Fix および Chips CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0146 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245497 7.5 危険 bingo news - BP News の bn_smrep1.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0145 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245498 6.8 警告 digitizing quote and ordering system - Digitizing Quote And Ordering System の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0144 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245499 5 警告 fersch - Fersch Formbankserver の formbankcgi.exe におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0138 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
245500 6.8 警告 aratix - Aratix の inc/init.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0135 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219651 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20520 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219652 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address. CWE-79
Cross-site Scripting 		CVE-2019-20519 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219653 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20518 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219654 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20517 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219655 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20516 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219656 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20515 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219657 6.1 MEDIUM
Network 		frappe erpnext ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI. CWE-79
Cross-site Scripting 		CVE-2019-20514 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219658 6.1 MEDIUM
Network 		edx open_edx Open edX Ironwood.1 allows support/certificates?user= reflected XSS. CWE-79
Cross-site Scripting 		CVE-2019-20513 2024-11-21 13:38 2020-03-20 Show GitHub Exploit DB Packet Storm
219659 6.1 MEDIUM
Network 		igniterealtime openfire Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter. CWE-79
Cross-site Scripting 		CVE-2019-20527 2024-11-21 13:38 2020-03-19 Show GitHub Exploit DB Packet Storm
219660 6.1 MEDIUM
Network 		ilch ilch_cms ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter. CWE-79
Cross-site Scripting 		CVE-2019-20524 2024-11-21 13:38 2020-03-19 Show GitHub Exploit DB Packet Storm