Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228931	7.5	危険	vladimir meshakov	-	Vladimir Menshakov buratinable templator における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6867	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228932	7.8	危険	stphp	-	STphp EasyNews におけるユーザ名などを取得される脆弱性	-	CVE-2006-6866	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228933	7.8	危険	softartisans	-	SAFileUp の SAFileUpSamples/util/viewsrc.asp におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6865	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228934	10	危険	website designs for less	-	Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性	-	CVE-2006-6859	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228935	7.5	危険	webtext	-	WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性	-	CVE-2006-6856	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228936	7.5	危険	shadowed works	-	Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6850	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228937	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6847	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228938	10	危険	phpBB	-	phpBB の特定のフォームにおける脆弱性	-	CVE-2006-6841	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228939	10	危険	phpBB	-	phpBB における脆弱性	-	CVE-2006-6840	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

228940	10	危険	phpBB	-	phpBB における脆弱性	-	CVE-2006-6839	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197891	7.5	HIGH Network	leptonica debian fedoraproject	leptonica debian_linux fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.	CWE-125 Out-of-bounds Read	CVE-2020-36281	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197892	7.5	HIGH Network	leptonica fedoraproject	leptonica fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.	CWE-125 Out-of-bounds Read	CVE-2020-36280	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197893	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.	CWE-125 Out-of-bounds Read	CVE-2020-36279	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197894	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.	CWE-125 Out-of-bounds Read	CVE-2020-36278	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197895	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-36277	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197896	7.5	HIGH Network	identitymodel_project	identitymodel	An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.	NVD-CWE-noinfo	CVE-2020-36255	2024-11-21 14:29	2021-03-5	Show	GitHub Exploit DB Packet Storm

197897	5.3	MEDIUM Network	atlassian	crowd	The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d…	NVD-CWE-noinfo	CVE-2020-36240	2024-11-21 14:29	2021-03-2	Show	GitHub Exploit DB Packet Storm

197898	8.1	HIGH Network	dropbear_ssh_project	dropbear_ssh	scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.	NVD-CWE-noinfo	CVE-2020-36254	2024-11-21 14:29	2021-02-25	Show	GitHub Exploit DB Packet Storm

197899	5.0	MEDIUM Network	atlassian	atlassian-gadgets	The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36232	2024-11-21 14:29	2021-02-23	Show	GitHub Exploit DB Packet Storm

197900	4.6	MEDIUM Physics	owncloud	owncloud	The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-36248	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed