Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231061 7.5 危険 Vastal I-Tech & Co. - Buddy Zone の view_sub_cat.php における SQL インジェクションの脆弱性 - CVE-2007-3549 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231062 7.1 危険 w3filer - W3Filer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3548 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231063 7.8 危険 qt-cute - QuickTicket の qti_checkname.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3547 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231064 7.1 危険 warzone - Warzone 2100 Resurrection におけるバッファオーバーフローの脆弱性 - CVE-2007-3545 2012-12-20 18:19 2007-06-22 Show GitHub Exploit DB Packet Storm
231065 6.5 警告 WordPress.org - WordPress および WordPress MU の wp-app.php などにおける任意の PHP コードを実行される脆弱性 - CVE-2007-3544 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231066 6 警告 WordPress.org - WordPress および WordPress MU における任意の PHP コードを実行される脆弱性 - CVE-2007-3543 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231067 4.3 警告 PluXml - Pluxml の admin/auth.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3542 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231068 4.3 警告 rainworx - rwAuction Pro の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3540 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231069 7.5 危険 qt-cute - QuickTicket およびの QuickTalk フォーラムにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3539 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231070 7.5 危険 qt-cute - QuickTalk guestbook の qtg_msg_view.php における SQL インジェクションの脆弱性 - CVE-2007-3538 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198761 9.8 CRITICAL
Network
intelliantech aptus The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY. CWE-798
 Use of Hard-coded Credentials
CVE-2020-7999 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198762 6.1 MEDIUM
Network
dolibarr dolibarr_erp\/crm htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. CWE-79
Cross-site Scripting
CVE-2020-7996 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198763 9.8 CRITICAL
Network
dolibarr dolibarr_erp\/crm The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-7995 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198764 6.1 MEDIUM
Network
dolibarr dolibarr_erp\/crm Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) label[libelle] parameter to the /htdocs/admin/dict.php… CWE-79
Cross-site Scripting
CVE-2020-7994 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198765 8.8 HIGH
Network
adive framework Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password. CWE-352
 Origin Validation Error
CVE-2020-7991 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198766 6.1 MEDIUM
Network
adive framework Adive Framework 2.0.8 has admin/user/add userName XSS. CWE-79
Cross-site Scripting
CVE-2020-7990 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198767 6.1 MEDIUM
Network
adive framework Adive Framework 2.0.8 has admin/user/add userUsername XSS. CWE-79
Cross-site Scripting
CVE-2020-7989 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198768 7.5 HIGH
Network
solarwinds n-central SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive inf… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-7984 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
198769 9.8 CRITICAL
Network
rubygeocoder geocoder sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data. CWE-89
SQL Injection
CVE-2020-7981 2024-11-21 14:38 2020-01-26 Show GitHub Exploit DB Packet Storm
198770 9.8 CRITICAL
Network
intelliantech aptus_web Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intelli… CWE-78
OS Command 
CVE-2020-7980 2024-11-21 14:38 2020-01-26 Show GitHub Exploit DB Packet Storm