Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228911 4.3 警告 ztml - ezPortal/ztml CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4500 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228912 7.5 危険 phpalbum.net - PortailPHP 用の PhpAlbum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4498 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228913 2.1 注意 xbiff2 - xbiff2 におけるログイン資格情報などを重要な情報を取得される脆弱性 - CVE-2006-4493 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228914 7.5 危険 ultrize - MiniBill における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4489 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228915 4.3 警告 visualshapers - Visual Shapers ezContents の loginreq2.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4479 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228916 7.5 危険 visualshapers - Visual Shapers ezContents の headeruserdata.php における SQL インジェクションの脆弱性 - CVE-2006-4478 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228917 7.5 危険 visualshapers - Visual Shapers ezContents における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4477 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228918 7.5 危険 Simple Machines - SMF における任意のローカルファイルを読むディレクトリトラバーサル攻撃を実行される脆弱性 - CVE-2006-4467 2012-12-20 18:02 2006-08-19 Show GitHub Exploit DB Packet Storm
228919 6.4 警告 phpgroupware - phpGroupWare の calendar/inc/class.holidaycalc.inc.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4458 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
228920 7.5 危険 phpecard - phpECard の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4457 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198081 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. CWE-787
 Out-of-bounds Write
CVE-2020-35530 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198082 9.8 CRITICAL
Network
sqlite
netapp
sqlite
ontap_select_deploy_administration_utility
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. - CVE-2020-35527 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198083 7.5 HIGH
Network
sqlite sqlite In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CWE-476
 NULL Pointer Dereference
CVE-2020-35525 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
198084 5.5 MEDIUM
Local
libjpeg-turbo libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. CWE-476
 NULL Pointer Dereference
CVE-2020-35538 2024-11-21 14:27 2022-09-1 Show GitHub Exploit DB Packet Storm
198085 7.8 HIGH
Local
libpng
debian
pngcheck
debian_linux
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. - CVE-2020-35511 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
198086 5.4 MEDIUM
Network
redhat keycloak A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest th… CWE-295
Improper Certificate Validation 
CVE-2020-35509 2024-11-21 14:27 2022-08-24 Show GitHub Exploit DB Packet Storm
198087 6.1 MEDIUM
Network
gollum_project gollum Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog. CWE-79
Cross-site Scripting
CVE-2020-35305 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
198088 5.4 MEDIUM
Network
multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php. CWE-79
Cross-site Scripting
CVE-2020-35261 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
198089 8.8 HIGH
Network
victor_cms_project victor_cms Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_u… CWE-89
SQL Injection
CVE-2020-35597 2024-11-21 14:27 2022-06-17 Show GitHub Exploit DB Packet Storm
198090 8.8 HIGH
Network
cgal
debian
computational_geometry_algorithms_library
debian_linux
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35632 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm