Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248611	7.5	危険	elkagroup	-	elkagroup Image Gallery の property.php における SQL インジェクションの脆弱性	-	CVE-2007-3461	2012-06-26 15:46	2007-06-27	Show	GitHub Exploit DB Packet Storm

248612	7.5	危険	eva-web	-	EVA-Web の index.php3 における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3460	2012-06-26 15:46	2007-06-27	Show	GitHub Exploit DB Packet Storm

248613	6.4	警告	civiltech	-	Civitech Avax Vector の特定の ActiveX コントロールにおける任意のファイルを作成または上書きされる脆弱性	-	CVE-2007-3459	2012-06-26 15:46	2007-06-27	Show	GitHub Exploit DB Packet Storm

248614	7.5	危険	edocstore	-	eDocStore の essentials/minutes/doc.php における SQL インジェクションの脆弱性	-	CVE-2007-3452	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248615	6.5	警告	gorani network	-	6ALBlog の admin/index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3451	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248616	6.8	警告	gorani network	-	6ALBlog の member.php における SQL インジェクションの脆弱性	-	CVE-2007-3450	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248617	6.8	警告	gorani network	-	6ALBlog の member.php における SQL インジェクションの脆弱性	-	CVE-2007-3449	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248618	4.3	警告	bugmall	-	BugMall Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-3448	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248619	6.8	警告	bugmall	-	BugMall Shopping Cart における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-3447	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

248620	7.5	危険	bugmall	-	BugMall Shopping Cart におけるログインアクセス権を取得される脆弱性	-	CVE-2007-3446	2012-06-26 15:46	2007-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210211	5.3	MEDIUM Network	siemens	nucleus_source_code nucleus_net capital_vstar pluscontrol_1st_gen nucleus_readystart	A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5…	NVD-CWE-Other	CVE-2020-28388	2024-11-21 14:22	2021-02-10	Show	GitHub Exploit DB Packet Storm

210212	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the extend function.	NVD-CWE-Other	CVE-2020-28450	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

210213	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the set function.	NVD-CWE-Other	CVE-2020-28449	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

210214	5.4	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-28001	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

210215	6.5	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.	CWE-22 Path Traversal	CVE-2020-27994	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

210216	9.8	CRITICAL Network	moxa	edr-g903_firmware edr-g903-t_firmware edr-g902_firmware edr-g902-t_firmware edr-810-2gsfp_firmware edr-810-2gsfp-t_firmware edr-810-vpn-2gsfp_firmware edr-810-vpn-2gsfp-t_firmware	Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Fir…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-28144	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

210217	6.8	MEDIUM Network	indutny	elliptic	The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-28498	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

210218	7.3	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path being set are not properly sanitized, l…	NVD-CWE-Other	CVE-2020-28495	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

210219	8.6	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_proces…	CWE-78 OS Command	CVE-2020-28494	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

210220	5.3	MEDIUM Network	palletsprojects fedoraproject	jinja fedora	This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-28493	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed