Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226021 7.5 危険 samelinux - WOTW の visualizza.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6224 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
226022 7.5 危険 wotw - WOTW の visualizza.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6223 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
226023 7.5 危険 Cafuego - SDMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6220 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
226024 4.3 警告 php-stats - Php-Stats の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6212 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226025 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Software Zone の view_product.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6209 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226026 8.5 危険 phpg upload - PHPG Upload の form_upload.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6207 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226027 7.5 危険 RobotStats - RobotStats における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6206 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226028 4.3 警告 xaaaaav38 - Xavier Flahaut URLStreet の seeurl.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6205 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226029 7.5 危険 supernet - SuperNET Shop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6204 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
226030 4.3 警告 wiki - Swiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6200 2012-12-20 19:10 2009-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199081 8.1 HIGH
Network 		internment_project internment An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-35874 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199082 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free. CWE-416
 Use After Free 		CVE-2020-35873 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199083 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type. NVD-CWE-noinfo
CVE-2020-35872 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199084 8.1 HIGH
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race. CWE-362
Race Condition 		CVE-2020-35871 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199085 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free. CWE-416
 Use After Free 		CVE-2020-35870 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199086 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings. CWE-134
Use of Externally-Controlled Format String 		CVE-2020-35869 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199087 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification. NVD-CWE-noinfo
CVE-2020-35868 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199088 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module. NVD-CWE-noinfo
CVE-2020-35867 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199089 9.8 CRITICAL
Network 		rusqlite_project rusqlite An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor. NVD-CWE-noinfo
CVE-2020-35866 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199090 7.5 HIGH
Network 		os_str_bytes_project os_str_bytes An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior. NVD-CWE-noinfo
CVE-2020-35865 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm