Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227211 4.3 警告 サン・マイクロシステムズ - Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 - CVE-2007-4025 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
227212 4.3 警告 w1l3d4 - W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4024 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
227213 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4014 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227214 6.8 警告 virtual hosting control system - VHCS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-3988 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227215 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 - CVE-2007-3986 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227216 5 警告 securecomputing - SecurityReporter の file.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3985 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227217 7.5 危険 zenturi - sasatl.dll の NixonMyPrograms クラスにおけるバッファオーバーフローの脆弱性 - CVE-2007-3984 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227218 7.5 危険 wsnlinks - WSN Links Basic Edition の index.php における SQL インジェクションの脆弱性 - CVE-2007-3981 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227219 10 危険 rcms pro - RCMS Pro RGameScript Pro の page.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3980 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
227220 6.8 警告 ufmod - uFMOD における脆弱性 - CVE-2007-3965 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198081 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. CWE-787
 Out-of-bounds Write
CVE-2020-35530 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198082 9.8 CRITICAL
Network
sqlite
netapp
sqlite
ontap_select_deploy_administration_utility
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. - CVE-2020-35527 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198083 7.5 HIGH
Network
sqlite sqlite In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CWE-476
 NULL Pointer Dereference
CVE-2020-35525 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198084 5.5 MEDIUM
Local
libjpeg-turbo libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. CWE-476
 NULL Pointer Dereference
CVE-2020-35538 2024-11-21 14:27 2022-09-1 Show GitHub Exploit DB Packet Storm
198085 7.8 HIGH
Local
libpng
debian
pngcheck
debian_linux
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. - CVE-2020-35511 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
198086 5.4 MEDIUM
Network
redhat keycloak A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest th… CWE-295
Improper Certificate Validation 
CVE-2020-35509 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
198087 6.1 MEDIUM
Network
gollum_project gollum Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog. CWE-79
Cross-site Scripting
CVE-2020-35305 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
198088 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php. CWE-79
Cross-site Scripting
CVE-2020-35261 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
198089 8.8 HIGH
Network
victor_cms_project victor_cms Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_u… CWE-89
SQL Injection
CVE-2020-35597 2024-11-21 14:27 2022-06-17 Show GitHub Exploit DB Packet Storm
198090 8.8 HIGH
Network
cgal
debian
computational_geometry_algorithms_library
debian_linux
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35632 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm