Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 21, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224781 | 5 | 警告 | fatfreecrm.com | - | Fat Free CRM における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2013-7224 | 2014-01-7 16:35 | 2013-12-27 | Show | GitHub Exploit DB Packet Storm |
| 224782 | 6.8 | 警告 | fatfreecrm.com | - | Fat Free CRM におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-7223 | 2014-01-7 16:35 | 2013-12-27 | Show | GitHub Exploit DB Packet Storm |
| 224783 | 5 | 警告 | fatfreecrm.com | - | Fat Free CRM の config/initializers/secret_token.rb における署名付き Cookie を偽装される脆弱性 |
CWE-310
暗号の問題 |
CVE-2013-7222 | 2014-01-7 16:34 | 2013-12-27 | Show | GitHub Exploit DB Packet Storm |
| 224784 | 6.8 | 警告 | ProjectForge | - | ProjectForge におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-7251 | 2014-01-7 16:30 | 2013-12-30 | Show | GitHub Exploit DB Packet Storm |
| 224785 | 3.5 | 注意 | ProjectForge | - | ProjectForge の JsonBuilder の実装におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-7250 | 2014-01-7 16:30 | 2013-12-5 | Show | GitHub Exploit DB Packet Storm |
| 224786 | 3.5 | 注意 | ProjectForge | - | ProjectForge におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5269 | 2014-01-7 16:29 | 2011-02-6 | Show | GitHub Exploit DB Packet Storm |
| 224787 | 5.8 | 警告 | サイボウズ | - | サイボウズ ガルーンのケータイ機能における認証回避の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-6006 | 2014-01-7 16:11 | 2013-12-25 | Show | GitHub Exploit DB Packet Storm |
| 224788 | 6.4 | 警告 | Bare Bones Software | - | 複数の Bare Bones Software 製品で使用されるソフトウェアアップデートメカニズムにおけるアップデートの "tampering or corruption" を実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-3667 | 2014-01-7 15:45 | 2013-07-2 | Show | GitHub Exploit DB Packet Storm |
| 224789 | 4.3 | 警告 | Ubiquiti Networks | - | Ubiquiti Networks UniFi の UniFi Controller の管理者インターフェースにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-3572 | 2014-01-7 14:50 | 2013-10-22 | Show | GitHub Exploit DB Packet Storm |
| 224790 | 10 | 危険 | op5 | - | op5 Monitor および op5 Appliance における脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-0264 | 2014-01-7 14:33 | 2012-01-20 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 21, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210971 | 9.0 |
CRITICAL
Network |
liquidfiles | liquidfiles | An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL i… |
CWE-79
Cross-site Scripting |
CVE-2020-29071 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210972 | 5.5 |
MEDIUM
Local |
modern_honey_network_project | modern_honey_network | _get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through 2020-11-23 allows attackers to cause a denial-of-service via an IP address that is absent from a local geolocation… |
NVD-CWE-noinfo
|
CVE-2020-29069 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210973 | 7.5 |
HIGH
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2020-29063 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210974 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29062 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210975 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29061 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210976 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29060 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210977 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29059 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210978 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-306
Missing Authentication for Critical Function |
CVE-2020-29058 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210979 | 7.5 |
HIGH
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
NVD-CWE-noinfo
|
CVE-2020-29057 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 210980 | 6.1 |
MEDIUM
Network |
hrsale | hrsale | HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-29053 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |