Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249031 4.3 警告 exoscripts - ExoPHPdesk におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5990 2012-06-26 15:54 2007-11-15 Show GitHub Exploit DB Packet Storm
249032 7.5 危険 bti-tracker - BtiTracker の blocks/shoutbox_block.php における任意ユーザとしてシャウトボックスエントリを投稿される脆弱性 CWE-255
CWE-264
CWE-287
CVE-2007-5988 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249033 6.8 警告 bti-tracker - BtiTracker の details.php における保護メカニズムを回避される脆弱性 CWE-264
CWE-287
CVE-2007-5987 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249034 7.5 危険 BTITeam - BtiTracker の include/functions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5986 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249035 4.3 警告 bti-tracker - BtiTracker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5985 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249036 4.3 警告 eggblog - eggblog の home/rss.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5980 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249037 4.3 警告 F5 Networks - F5 Firepass 4100 SSL VPN の download_plugin.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5979 2012-06-26 15:54 2007-11-14 Show GitHub Exploit DB Packet Storm
249038 7.5 危険 e-vendejo - E-Vendejo の articles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5951 2012-06-26 15:54 2007-11-13 Show GitHub Exploit DB Packet Storm
249039 4 警告 bandersnatch - Bandersnatch における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5942 2012-06-26 15:54 2007-11-13 Show GitHub Exploit DB Packet Storm
249040 10 危険 アドビシステムズ - Adobe Shockwave の SWCtl.SWCtl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5941 2012-06-26 15:54 2007-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213821 6.1 MEDIUM
Network 		dropouts super_backup Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows… CWE-79
Cross-site Scripting 		CVE-2020-23042 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213822 6.1 MEDIUM
Network 		dropouts air_share Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability… CWE-79
Cross-site Scripting 		CVE-2020-23041 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213823 7.5 HIGH
Network 		sky_file_project sky_file Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands. CWE-22
Path Traversal 		CVE-2020-23040 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213824 5.4 MEDIUM
Network 		newsoftwares folder_lock Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute … CWE-79
Cross-site Scripting 		CVE-2020-23039 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213825 7.5 HIGH
Network 		kumilabs swift_file_transfer Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including n… CWE-22
Path Traversal 		CVE-2020-23038 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213826 9.8 CRITICAL
Network 		portable playable Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. CWE-94
Code Injection 		CVE-2020-23037 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213827 5.9 MEDIUM
Network 		medianavi smacom MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module.… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-23036 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
213828 9.8 CRITICAL
Network 		mercury mer1200_firmware
mer1200g_firmware 		A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1. CWE-78
OS Command  		CVE-2020-22724 2024-11-21 14:13 2021-10-14 Show GitHub Exploit DB Packet Storm
213829 5.5 MEDIUM
Local 		gpac gpac Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-22679 2024-11-21 14:13 2021-10-13 Show GitHub Exploit DB Packet Storm
213830 5.5 MEDIUM
Local 		gpac gpac An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted inp… CWE-787
 Out-of-bounds Write 		CVE-2020-22678 2024-11-21 14:13 2021-10-13 Show GitHub Exploit DB Packet Storm