Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229921 5 警告 Simple Invoices - Simple Invoices の include/auth/auth.php における重要な情報を取得される脆弱性 - CVE-2007-1341 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
229922 7.5 危険 weltennetz - Weltennetz News-Letterman の eintrag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1340 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
229923 7.8 危険 VMware - VMware Workstation の仮想マシンプロセスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1337 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229924 9.3 危険 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-1332 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229925 4.3 警告 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1331 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229926 7.8 危険 silcnet - silc-server の apps/silcd/command.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1327 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229927 7.5 危険 s9y - Serendipity の index.php における SQL インジェクションの脆弱性 - CVE-2007-1326 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229928 7.1 危険 The phpMyAdmin Project - phpMyAdmin の libraries/common.lib.php におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1325 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
229929 5 警告 snapgear - SnapGear におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1324 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
229930 6.8 警告 savas place - Sava's Guestbook の add2.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1305 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197271 8.8 HIGH
Network 		os4ed opensis SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can m… CWE-89
SQL Injection 		CVE-2020-6120 2024-11-21 14:35 2020-09-1 Show GitHub Exploit DB Packet Storm
197272 8.8 HIGH
Network 		os4ed opensis SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker c… CWE-89
SQL Injection 		CVE-2020-6119 2024-11-21 14:35 2020-09-1 Show GitHub Exploit DB Packet Storm
197273 8.8 HIGH
Network 		os4ed opensis SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker … CWE-89
SQL Injection 		CVE-2020-6118 2024-11-21 14:35 2020-09-1 Show GitHub Exploit DB Packet Storm
197274 8.8 HIGH
Network 		os4ed opensis SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker ca… CWE-89
SQL Injection 		CVE-2020-6117 2024-11-21 14:35 2020-09-1 Show GitHub Exploit DB Packet Storm
197275 4.3 MEDIUM
Network 		sap abap_platform
netweaver_application_server_abap 		Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP u… NVD-CWE-noinfo
CVE-2020-6310 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm
197276 7.5 HIGH
Network 		sap netweaver_application_server_java SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the atta… CWE-306
Missing Authentication for Critical Function 		CVE-2020-6309 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm
197277 8.1 HIGH
Network 		sap hcm_travel_management SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of priv… CWE-862
 Missing Authorization 		CVE-2020-6301 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm
197278 4.8 MEDIUM
Network 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2, 4.3, allows an attacker with administrator rights can use the web application to send malicious code t… CWE-79
Cross-site Scripting 		CVE-2020-6300 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm
197279 4.3 MEDIUM
Network 		sap abap_platform
netweaver_application_server_abap 		SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Inform… NVD-CWE-noinfo
CVE-2020-6299 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm
197280 8.1 HIGH
Network 		sap generic_market_data SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure val… CWE-862
 Missing Authorization 		CVE-2020-6298 2024-11-21 14:35 2020-08-12 Show GitHub Exploit DB Packet Storm