Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226581	7.5	危険	PreProject.com	-	Pre Projects Pre Real Estate Listings の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6798	2012-12-20 19:10	2009-05-7	Show	GitHub Exploit DB Packet Storm

226582	7.5	危険	PreProject.com	-	Pre Projects Pre Real Estate Listings の manager/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6796	2012-12-20 19:10	2009-05-7	Show	GitHub Exploit DB Packet Storm

226583	7.5	危険	sfs ez pub	-	SFS EZ Pub Site の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6794	2012-12-20 19:10	2009-05-7	Show	GitHub Exploit DB Packet Storm

226584	7.5	危険	scripts-for-sites	-	SFS EZ Adult Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6784	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226585	7.5	危険	scripts-for-sites	-	SFS EZ Home Business Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6783	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226586	7.5	危険	scripts-for-sites	-	SFS EZ Hosting Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6782	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226587	7.5	危険	scripts-for-sites	-	SFS Gaming Directory の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6781	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226588	7.5	危険	scripts-for-sites	-	SFS SFS EZ Affiliate の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6780	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226589	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Sarkilar モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6779	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

226590	7.5	危険	scripts-for-sites	-	SFS EZ Auction の viewfaqs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6778	2012-12-20 19:10	2009-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200231	5.5	MEDIUM Local	dync_project	dync	An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question.	NVD-CWE-noinfo	CVE-2020-35903	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200232	9.8	CRITICAL Network	actix	actix-codec	An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.	CWE-416 Use After Free	CVE-2020-35902	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200233	7.5	HIGH Network	actix	actix-http	An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.	CWE-416 Use After Free	CVE-2020-35901	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200234	5.5	MEDIUM Local	array-queue_project	array-queue	An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free.	CWE-416 Use After Free	CVE-2020-35900	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200235	5.5	MEDIUM Local	actix	actix-service	An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.	CWE-416 Use After Free	CVE-2020-35899	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200236	9.1	CRITICAL Network	actix	actix-utils	An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.	CWE-416 Use After Free	CVE-2020-35898	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200237	9.8	CRITICAL Network	hgiga	msr45_isherlock-user ssr45_isherlock-user	HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.	CWE-78 OS Command	CVE-2020-35851	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200238	7.5	HIGH Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugn…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-35849	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

200239	6.5	MEDIUM Network	cockpit-project	cockpit	An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35850	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

200240	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.	CWE-89 SQL Injection	CVE-2020-35848	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed