Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230991 7.5 危険 pictures rating - Picture Rating の index.php における SQL インジェクションの脆弱性 - CVE-2007-3881 2012-12-20 18:33 2007-07-18 Show GitHub Exploit DB Packet Storm
230992 7.2 危険 サン・マイクロシステムズ - SUNWsrspx パッケージで同梱されている SRS Net Connect の srsexec におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2007-3880 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
230993 6.9 警告 トレンドマイクロ - Trend Micro AntiSpyware および PC-Cillin Internet Security 2007 の SSAPI Engine におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3873 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
230994 6 警告 TortoiseSVN
CollabNet, Inc.
- TortoiseSVN で使用されている Subversion におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-3846 2012-12-20 18:33 2007-08-27 Show GitHub Exploit DB Packet Storm
230995 9 危険 Pidgin - Linux 用の Pidgin における特定のコマンドを実行される脆弱性 - CVE-2007-3841 2012-12-20 18:33 2007-07-17 Show GitHub Exploit DB Packet Storm
230996 7.5 危険 sitetrafficstats - Traffic Stats の referralUrl.php における SQL インジェクションの脆弱性 - CVE-2007-3840 2012-12-20 18:33 2007-07-17 Show GitHub Exploit DB Packet Storm
230997 4 警告 tbdev.net - TBDev.NET の takeprofedit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3839 2012-12-20 18:33 2007-07-17 Show GitHub Exploit DB Packet Storm
230998 2.6 注意 tbdev.net - takeprofedit.php の takeprofedit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3838 2012-12-20 18:33 2007-07-17 Show GitHub Exploit DB Packet Storm
230999 4.9 警告 republike slovenije - PIRS の pirs32.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-3815 2012-12-20 18:33 2007-07-16 Show GitHub Exploit DB Packet Storm
231000 7.5 危険 prozilla - Prozilla Directory Script における SQL インジェクションの脆弱性 - CVE-2007-3809 2012-12-20 18:33 2007-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199891 7.2 HIGH
Network
icehrm icehrm An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a) . A specially crafted HTTP request … CWE-89
SQL Injection
CVE-2020-6114 2024-11-21 14:35 2020-07-11 Show GitHub Exploit DB Packet Storm
199892 7.8 HIGH
Local
leadtools leadtools An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a buffer overflow resulting in remote code execution. An attac… CWE-787
 Out-of-bounds Write
CVE-2020-6089 2024-11-21 14:35 2020-07-2 Show GitHub Exploit DB Packet Storm
199893 5.3 MEDIUM
Network
sap solution_manager SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired. CWE-20
CWE-116
 Improper Input Validation 
 Improper Encoding or Escaping of Output
CVE-2020-6261 2024-11-21 14:35 2020-07-1 Show GitHub Exploit DB Packet Storm
199894 7.2 HIGH
Network
wago pfc200_firmware An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution r… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-6090 2024-11-21 14:35 2020-06-11 Show GitHub Exploit DB Packet Storm
199895 9.8 CRITICAL
Network
sap netweaver_application_server_abap SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-6275 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm
199896 8.2 HIGH
Network
sap solution_manager SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the system to crash and re… CWE-91
Blind XPath Injection
CVE-2020-6271 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm
199897 6.5 MEDIUM
Network
sap netweaver_application_server_abap SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Au… CWE-862
 Missing Authorization
CVE-2020-6270 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm
199898 6.5 MEDIUM
Network
sap businessobjects_business_intelligence_platform Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclos… NVD-CWE-noinfo
CVE-2020-6269 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm
199899 8.1 HIGH
Network
sap erp_\(s4core\)
erp_\(ea-finserv\)
Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authori… CWE-862
 Missing Authorization
CVE-2020-6268 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm
199900 5.4 MEDIUM
Network
sap fiori SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection. CWE-601
Open Redirect
CVE-2020-6266 2024-11-21 14:35 2020-06-10 Show GitHub Exploit DB Packet Storm