Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226071	4.3	警告	xt:Commerce	-	xt:Commerce の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6044	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226072	7.5	危険	phpprobid	-	PPB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6043	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226073	7.5	危険	wsnlinks	-	WSN Links の comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6033	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226074	7.5	危険	wsnlinks	-	WSN Links Free の comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6032	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226075	7.5	危険	wsnlinks	-	WSN Links の vote.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6031	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226076	7.5	危険	university of queensland	-	University of Queensland Library Fez の list.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6028	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

226077	7.5	危険	xnova	-	Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6023	2012-12-20 19:10	2009-02-2	Show	GitHub Exploit DB Packet Storm

226078	7.5	危険	xnova	-	Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6022	2012-12-20 19:10	2009-02-2	Show	GitHub Exploit DB Packet Storm

226079	7.5	危険	rianxosencabos cms	-	Rianxosencabos CMS の scripts/links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6014	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

226080	7.5	危険	sg real estate portal	-	SG Real Estate Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6011	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198941	9.8	CRITICAL Network	actix	actix-codec	An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.	CWE-416 Use After Free	CVE-2020-35902	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198942	7.5	HIGH Network	actix	actix-http	An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.	CWE-416 Use After Free	CVE-2020-35901	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198943	5.5	MEDIUM Local	array-queue_project	array-queue	An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free.	CWE-416 Use After Free	CVE-2020-35900	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198944	5.5	MEDIUM Local	actix	actix-service	An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.	CWE-416 Use After Free	CVE-2020-35899	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198945	9.1	CRITICAL Network	actix	actix-utils	An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.	CWE-416 Use After Free	CVE-2020-35898	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198946	9.8	CRITICAL Network	hgiga	msr45_isherlock-user ssr45_isherlock-user	HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.	CWE-78 OS Command	CVE-2020-35851	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198947	7.5	HIGH Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugn…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-35849	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198948	6.5	MEDIUM Network	cockpit-project	cockpit	An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35850	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

198949	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.	CWE-89 SQL Injection	CVE-2020-35848	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

198950	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.	CWE-89 SQL Injection	CVE-2020-35847	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed