Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 1, 2026, 12:10 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228081 | 7.5 | 危険 | webSPELL | - | Webspell の index.php における絶対パストラバーサルの脆弱性 | - | CVE-2007-4028 | 2012-12-20 18:33 | 2007-07-26 | Show | GitHub Exploit DB Packet Storm |
| 228082 | 6.8 | 警告 | Telaxus LLC | - | epesi framework における任意の PHP コードを実行される脆弱性 | - | CVE-2007-4026 | 2012-12-20 18:33 | 2007-07-26 | Show | GitHub Exploit DB Packet Storm |
| 228083 | 4.3 | 警告 | サン・マイクロシステムズ | - | Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 | - | CVE-2007-4025 | 2012-12-20 18:33 | 2007-07-24 | Show | GitHub Exploit DB Packet Storm |
| 228084 | 4.3 | 警告 | w1l3d4 | - | W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-4024 | 2012-12-20 18:33 | 2007-07-26 | Show | GitHub Exploit DB Packet Storm |
| 228085 | 4.3 | 警告 | WordPress.org | - | WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-4014 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
| 228086 | 6.8 | 警告 | virtual hosting control system | - | VHCS におけるセッションをハイジャックされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-3988 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
| 228087 | 5 | 警告 | securecomputing | - | Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 | - | CVE-2007-3986 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
| 228088 | 5 | 警告 | securecomputing | - | SecurityReporter の file.cgi におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-3985 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
| 228089 | 7.5 | 危険 | zenturi | - | sasatl.dll の NixonMyPrograms クラスにおけるバッファオーバーフローの脆弱性 | - | CVE-2007-3984 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
| 228090 | 7.5 | 危険 | wsnlinks | - | WSN Links Basic Edition の index.php における SQL インジェクションの脆弱性 | - | CVE-2007-3981 | 2012-12-20 18:33 | 2007-07-25 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 1, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 200001 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29060 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200002 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-29059 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200003 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-306
Missing Authentication for Critical Function |
CVE-2020-29058 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200004 | 7.5 |
HIGH
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
NVD-CWE-noinfo
|
CVE-2020-29057 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200005 | 6.1 |
MEDIUM
Network |
hrsale | hrsale | HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-29053 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200006 | 9.8 |
CRITICAL
Network |
cdatatec cdata |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-78
OS Command |
CVE-2020-29056 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200007 | 5.9 |
MEDIUM
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-319
Cleartext Transmission of Sensitive Information |
CVE-2020-29055 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200008 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-29054 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200009 | 9.8 |
CRITICAL
Network |
karenderia_multiple_restaurant_system_project | karenderia_multiple_restaurant_system | A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various … |
CWE-89
SQL Injection |
CVE-2020-28994 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 200010 | 5.5 |
MEDIUM
Local |
musl-libc debian fedoraproject oracle |
musl debian_linux fedora graalvm |
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). |
CWE-787
Out-of-bounds Write |
CVE-2020-28928 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |