Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228761 7.5 危険 sme - SmE FileMailer の index.php および dl.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0350 2012-12-20 18:19 2007-01-18 Show GitHub Exploit DB Packet Storm
228762 7.5 危険 sme - SmE FileMailer の index.php における SQL インジェクションの脆弱性 - CVE-2007-0346 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228763 6.8 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0341 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228764 7.5 危険 thwboard - ThWboard の inc/header.inc.php における SQL インジェクションの脆弱性 - CVE-2007-0340 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228765 7.5 危険 scriptme - Scriptme SMe FileMailer の index.php における SQL インジェクションの脆弱性 - CVE-2007-0339 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228766 4.4 警告 rixstep - Rixstep Undercover の Undercover.app/Contents/Resources/uc における任意のファイルを上書きされる脆弱性 - CVE-2007-0336 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228767 7.5 危険 xentraz - liens_dynamiques の admin/adminlien.php3 などにおける許可されていない管理者の操作を実行される脆弱性 - CVE-2007-0332 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228768 6.8 警告 xentraz - liens_dynamiques の liens.php3 におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0331 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
228769 9.3 危険 トレンドマイクロ - Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0325 2012-12-20 18:19 2007-02-12 Show GitHub Exploit DB Packet Storm
228770 7.5 危険 BlackBerry - RIM の TeamOn Import Object ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0323 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
881 9.8 CRITICAL
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without para… New CWE-89
SQL Injection 		CVE-2026-41462 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
882 8.8 HIGH
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions to write files outs… New CWE-22
Path Traversal 		CVE-2026-41463 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
883 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to retrieve sensitive … New CWE-862
 Missing Authorization 		CVE-2026-41464 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
884 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequ… New CWE-22
Path Traversal 		CVE-2026-41465 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
885 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize user input by only d… New CWE-79
Cross-site Scripting 		CVE-2026-41466 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
886 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict HTML and HTM file … New CWE-79
Cross-site Scripting 		CVE-2026-41467 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
887 - - - authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either bec… New CWE-842
 Placement of User into Incorrect Group 		CVE-2026-6970 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
888 9.8 CRITICAL
Network 		- - A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a man… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7136 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
889 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
890 9.8 CRITICAL
Network 		- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm