Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228441 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6399 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228442 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6398 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228443 5 警告 ulrik petersen - Ulrik Petersen Emdros Database Engine におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6395 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228444 7.5 危険 plx web studio - plx Web Studio plx Pay の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6392 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228445 6.8 警告 positive software - Positive Software H-Sphere のコントロールパネルにおける任意のファイルにログデータを追加される脆弱性 - CVE-2006-6382 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228446 7.5 危険 ultimate helpdesk - Ultimate HelpDesk の getfile.asp におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6381 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228447 6.8 警告 ultimate helpdesk - Ultimate HelpDesk の index.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6380 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228448 7.5 危険 widcomm - BTSaveMySql における設定情報を取得される脆弱性 - CVE-2006-6378 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228449 7.5 危険 uploadscript - Uploadscript における admin パスワードハッシュを取得される脆弱性 - CVE-2006-6377 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
228450 6.8 警告 Simple Machines - SMF の display.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6375 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199571 9.8 CRITICAL
Network 		adrianmercurio gym_management_system An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable. CWE-89
SQL Injection 		CVE-2020-29288 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199572 9.8 CRITICAL
Network 		car_rental_management_system_project car_rental_management_system An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php. CWE-89
SQL Injection 		CVE-2020-29287 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199573 9.8 CRITICAL
Network 		point_of_sales_in_php\/pdo_project point_of_sales_in_php\/pdo SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter to edit_category.php. CWE-89
SQL Injection 		CVE-2020-29285 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199574 9.8 CRITICAL
Network 		multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter which allows unauthenticated SQL Injection. An attacker can s… CWE-89
SQL Injection 		CVE-2020-29284 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199575 9.8 CRITICAL
Network 		online_doctor_appointment_booking_system_php_and_mysql_project online_doctor_appointment_booking_system_php_and_mysql An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php. CWE-89
SQL Injection 		CVE-2020-29283 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199576 9.8 CRITICAL
Network 		bloodx_project bloodx SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication. CWE-89
SQL Injection 		CVE-2020-29282 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199577 9.8 CRITICAL
Network 		victor_cms_project victor_cms The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page. CWE-89
SQL Injection 		CVE-2020-29280 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199578 9.8 CRITICAL
Network 		74cms 74cms PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. NVD-CWE-noinfo
CVE-2020-29279 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199579 9.8 CRITICAL
Network 		docker crux_linux_docker_image The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allo… CWE-306
Missing Authentication for Critical Function 		CVE-2020-29389 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
199580 4.8 MEDIUM
Network 		lepton-cms leptoncms Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview secti… CWE-79
Cross-site Scripting 		CVE-2020-29240 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm