Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227431 6.8 警告 PHPMailer project - PHPMailer における任意のシェルコマンドを実行される脆弱性 - CVE-2007-3215 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227432 10 危険 PhpWiki - PhpWiki の lib/WikiUser/LDAP.php における認証を回避される脆弱性 - CVE-2007-3193 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
227433 6.8 警告 vincent hor - Calendarix における SQL インジェクションの脆弱性 - CVE-2007-3183 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
227434 4.3 警告 vincent hor - Calendarix におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3182 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
227435 7.5 危険 zindizayn okul web sistemi - Zindizayn Okul Web Sistemi における SQL インジェクションの脆弱性 - CVE-2007-3178 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227436 7.5 危険 w2b - W2B Online Banking における SQL インジェクションの脆弱性 - CVE-2007-3175 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227437 4.3 警告 w2b - W2B Online Banking の auth.w2b におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3174 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227438 5 警告 uebimiau - Uebimiau Webmail の demo/pop3/error.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3172 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227439 5 警告 uebimiau - Uebimiau Webmail における重要な情報を取得される脆弱性 - CVE-2007-3171 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
227440 4.3 警告 uebimiau - Uebimiau Webmail におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3170 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199411 5.4 MEDIUM
Network 		sugarcrm sugarcrm Multiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary add… CWE-79
Cross-site Scripting 		CVE-2020-28956 2024-11-21 14:23 2021-10-23 Show GitHub Exploit DB Packet Storm
199412 5.4 MEDIUM
Network 		sugarcrm sugarcrm SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the Create Employee module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a… CWE-79
Cross-site Scripting 		CVE-2020-28955 2024-11-21 14:23 2021-10-23 Show GitHub Exploit DB Packet Storm
199413 5.3 MEDIUM
Network 		fortinet fortisandbox An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain information about other users con… CWE-613
 Insufficient Session Expiration 		CVE-2020-29012 2024-11-21 14:23 2021-09-8 Show GitHub Exploit DB Packet Storm
199414 6.5 MEDIUM
Network 		seacms seacms Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account. CWE-352
 Origin Validation Error 		CVE-2020-28846 2024-11-21 14:23 2021-08-18 Show GitHub Exploit DB Packet Storm
199415 8.8 HIGH
Network 		fortinet fortisandbox Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execut… CWE-89
SQL Injection 		CVE-2020-29011 2024-11-21 14:23 2021-08-5 Show GitHub Exploit DB Packet Storm
199416 7.8 HIGH
Local 		raonwiz raon_k_editor An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-29157 2024-11-21 14:23 2021-07-15 Show GitHub Exploit DB Packet Storm
199417 7.5 HIGH
Network 		wayang-cms_project wayang-cms A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information. CWE-89
SQL Injection 		CVE-2020-29147 2024-11-21 14:23 2021-07-15 Show GitHub Exploit DB Packet Storm
199418 6.1 MEDIUM
Network 		wayang-cms_project wayang-cms A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For fi… CWE-79
Cross-site Scripting 		CVE-2020-29146 2024-11-21 14:23 2021-07-15 Show GitHub Exploit DB Packet Storm
199419 5.3 MEDIUM
Network 		fortinet fortisandbox A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system… CWE-362
Race Condition 		CVE-2020-29014 2024-11-21 14:23 2021-07-10 Show GitHub Exploit DB Packet Storm
199420 5.4 MEDIUM
Network 		razormist employee_management_system A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account. CWE-79
Cross-site Scripting 		CVE-2020-29215 2024-11-21 14:23 2021-06-16 Show GitHub Exploit DB Packet Storm