Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249391 7.1 危険 Grandstream Networks - Grandstream HT-488 の SIP パーサーにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5788 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249392 7.5 危険 a-enterprise - GoSamba における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5786 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249393 6.8 警告 Caupo.Net - CaupoShop Pro の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5784 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249394 7.5 危険 emagic-cms - emagiC CMS.Net の emc.asp における SQL インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5783 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249395 5 警告 fireconfig - FireConfig の dl.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5782 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249396 7.5 危険 Gretech - Gretech Online Movie Player の GomWeb3.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5779 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249397 5 警告 blue-collar productions - Blue-Collar Productions i-Gallery における base64エンコードされたパスワードを含むファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5777 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249398 5 警告 blue-collar productions - Blue-Collar Productions i-Gallery の igallery.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5776 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249399 9.3 危険 BitDefender - BitDefender における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5775 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
249400 5 警告 flatnuke3 - Flatnuke 3 の File Manager モジュールの index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-5774 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208881 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36495 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208882 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36494 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208883 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` an… CWE-79
Cross-site Scripting 		CVE-2020-36493 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208884 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` … CWE-79
Cross-site Scripting 		CVE-2020-36492 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208885 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and… CWE-79
Cross-site Scripting 		CVE-2020-36491 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208886 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEdit… CWE-79
Cross-site Scripting 		CVE-2020-36490 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208887 5.4 MEDIUM
Network 		dropouts air_share Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web… CWE-79
Cross-site Scripting 		CVE-2020-36489 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208888 6.5 MEDIUM
Network 		sky_file_project sky_file An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via `/null//` path commands. CWE-22
Path Traversal 		CVE-2020-36488 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208889 6.1 MEDIUM
Network 		swiftfiletransfer swift_file_transfer Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling. CWE-79
Cross-site Scripting 		CVE-2020-36486 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
208890 7.8 HIGH
Local 		madeportable playable Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary c… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-36485 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm