Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228611 6.5 警告 tru-zone - Tru-Zone Nuke ET の modules/Your_Account/index.php における任意のアカウントを削除される脆弱性 - CVE-2007-1925 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228612 7.5 危険 smodbip - SmodBIP の aktualnosci モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1920 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228613 5 警告 SAP - SAP RFC Library の RFC_SET_REG_SERVER_PROPERTY 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1918 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228614 10 危険 SAP - SAP RFC Library の SYSTEM_CREATE_INSTANCE 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1917 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228615 10 危険 SAP - SAP RFC Library の RFC_START_GUI 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1916 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228616 7.5 危険 SAP - SAP RFC Library の RFC_START_PROGRAM 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1915 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228617 7.8 危険 SAP - SAP RFC Library の RFC_START_PROGRAM 関数における重要な情報を取得される脆弱性 - CVE-2007-1914 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228618 5 警告 SAP - SAP RFC Library の TRUSTED_SYSTEM_SECURITY 関数におけるシステムおよびドメイン上のユーザーとグループの存在を確認される脆弱性 - CVE-2007-1913 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228619 7.5 危険 ryan haudenschilt - PHP の Ryan Haudenschilt Battle.net Clan Script における SQL インジェクションの脆弱性 - CVE-2007-1909 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228620 4.3 警告 pineapple technologies - Pineapple Technologies QuizShock の auth.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1905 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199831 5.4 MEDIUM
Network 		secomea sitemanager_1129_firmware
sitemanager_1139_firmware
sitemanager_1149_firmware
sitemanager_3329_firmware
sitemanager_3339_firmware
sitemanager_3349_firmware
sitemanager_3529_firmware… 		Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3. CWE-79
Cross-site Scripting 		CVE-2020-29027 2024-11-21 14:23 2021-02-17 Show GitHub Exploit DB Packet Storm
199832 6.1 MEDIUM
Network 		secomea sitemanager_embedded A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker … CWE-79
Cross-site Scripting 		CVE-2020-29025 2024-11-21 14:23 2021-02-17 Show GitHub Exploit DB Packet Storm
199833 5.3 MEDIUM
Network 		secomea gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware
gatemanager_8250_firmware 		Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affect… CWE-311
Missing Encryption of Sensitive Data 		CVE-2020-29024 2024-11-21 14:23 2021-02-17 Show GitHub Exploit DB Packet Storm
199834 3.5 LOW
Network 		secomea gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware
gatemanager_8250_firmware 		Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's com… CWE-116
 Improper Encoding or Escaping of Output 		CVE-2020-29023 2024-11-21 14:23 2021-02-17 Show GitHub Exploit DB Packet Storm
199835 5.3 MEDIUM
Network 		secomea gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware
gatemanager_8250_firmware 		Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior… NVD-CWE-noinfo
CVE-2020-29022 2024-11-21 14:23 2021-02-17 Show GitHub Exploit DB Packet Storm
199836 7.2 HIGH
Network 		open-emr openemr A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter. CWE-89
SQL Injection 		CVE-2020-29143 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm
199837 7.2 HIGH
Network 		open-emr openemr A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code paramet… CWE-89
SQL Injection 		CVE-2020-29140 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm
199838 7.2 HIGH
Network 		open-emr openemr A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands v… CWE-89
SQL Injection 		CVE-2020-29139 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm
199839 7.2 HIGH
Network 		open-emr openemr A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule_facility p… CWE-89
SQL Injection 		CVE-2020-29142 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm
199840 8.1 HIGH
Network 		secomea gatemanager_8250_firmware
gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware 		An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via… CWE-269
 Improper Privilege Management 		CVE-2020-29031 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm