Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":April 28, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227501 | 7.5 | 危険 | zakkis technology corporation | - | ABC Excel Parser の sample/xls2mysql における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2857 | 2012-12-20 18:19 | 2007-05-24 | Show | GitHub Exploit DB Packet Storm |
| 227502 | 10 | 危険 | sky software | - | Sky Software Shell MegaPack ActiveX の shComboBox ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 | - | CVE-2007-2848 | 2012-12-20 18:19 | 2007-05-24 | Show | GitHub Exploit DB Packet Storm |
| 227503 | 6.8 | 警告 | unicon-imc2 | - | unicon-imc2 の ImmModules/cce/ におけるスタックベースのバッファオーバーフローの脆弱性 | - | CVE-2007-2835 | 2012-12-20 18:19 | 2007-07-1 | Show | GitHub Exploit DB Packet Storm |
| 227504 | 9.3 | 危険 | wavelink media | - | TutorialCMS における認証を回避される脆弱性 | - | CVE-2007-2822 | 2012-12-20 18:19 | 2007-05-22 | Show | GitHub Exploit DB Packet Storm |
| 227505 | 7.5 | 危険 | WordPress.org | - | WordPress の wp-admin/admin-ajax.php における SQL インジェクションの脆弱性 | - | CVE-2007-2821 | 2012-12-20 18:19 | 2007-05-22 | Show | GitHub Exploit DB Packet Storm |
| 227506 | 4.3 | 警告 | track+ | - | Track+ の reportItem.do におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-2819 | 2012-12-20 18:19 | 2007-05-22 | Show | GitHub Exploit DB Packet Storm |
| 227507 | 7.5 | 危険 | vizayn urun | - | Vizayn Urun Tanitim Sitesi の default.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-2803 | 2012-12-20 18:19 | 2007-05-22 | Show | GitHub Exploit DB Packet Storm |
| 227508 | 4.3 | 警告 | rm | - | RM EasyMail Plus の cp/ps/Main/login/Login におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-2802 | 2012-12-20 18:19 | 2007-05-22 | Show | GitHub Exploit DB Packet Storm |
| 227509 | 6.8 | 警告 | vpasp | - | VP-ASP Shopping Cart の shopcontent.asp におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-2790 | 2012-12-20 18:19 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 227510 | 10 | 危険 | rational software | - | Rational Soft Hidden Administrator における認証を回避される脆弱性 | - | CVE-2007-2783 | 2012-12-20 18:19 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 28, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 199471 | 7.5 |
HIGH
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
NVD-CWE-noinfo
|
CVE-2020-29057 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199472 | 6.1 |
MEDIUM
Network |
hrsale | hrsale | HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-29053 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199473 | 9.8 |
CRITICAL
Network |
cdatatec cdata |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-78
OS Command |
CVE-2020-29056 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199474 | 5.9 |
MEDIUM
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-319
Cleartext Transmission of Sensitive Information |
CVE-2020-29055 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199475 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-29054 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199476 | 9.8 |
CRITICAL
Network |
karenderia_multiple_restaurant_system_project | karenderia_multiple_restaurant_system | A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various … |
CWE-89
SQL Injection |
CVE-2020-28994 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199477 | 5.5 |
MEDIUM
Local |
musl-libc debian fedoraproject oracle |
musl debian_linux fedora graalvm |
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). |
CWE-787
Out-of-bounds Write |
CVE-2020-28928 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199478 | 8.8 |
HIGH
Local |
xen | xen | An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one … |
CWE-787 CWE-193 Out-of-bounds Write Off-by-one Error |
CVE-2020-29040 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199479 | 6.1 |
MEDIUM
Network |
seeddms | seeddms | Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php. |
CWE-601
Open Redirect |
CVE-2020-28726 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 199480 | 9.8 |
CRITICAL
Network |
misp | misp | MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php. |
CWE-862
Missing Authorization |
CVE-2020-29006 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |