Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228961	7.5	危険	scriptsfrenzy.com	-	E-Uploader Pro の include/config.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6694	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228962	7.5	危険	Zabbix	-	zabbix におけるバッファオーバーフローの脆弱性	-	CVE-2006-6693	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228963	7.5	危険	Zabbix	-	zabbix におけるフォーマットストリングの脆弱性	-	CVE-2006-6692	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228964	7.5	危険	valdersoft	-	Valdersoft Shopping Cart における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6691	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228965	7.5	危険	TYPO3 Association	-	Typo3 の rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php における任意のコマンドを実行される脆弱性	-	CVE-2006-6690	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228966	7.5	危険	web-app.net	-	WebAPP におけるフィルタリングのメカニズムを回避される脆弱性	-	CVE-2006-6688	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228967	4.3	警告	web-app.net	-	WebAPP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-6687	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228968	6.8	警告	textsend	-	Carsen Klock TextSend の sender.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6686	2012-12-20 18:02	2006-12-21	Show	GitHub Exploit DB Packet Storm

228969	5	警告	winftp server	-	WinFtp Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6673	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

228970	6.8	警告	webcalendar	-	WebCalendar の export_handler.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6669	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197891	7.5	HIGH Network	leptonica debian fedoraproject	leptonica debian_linux fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.	CWE-125 Out-of-bounds Read	CVE-2020-36281	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197892	7.5	HIGH Network	leptonica fedoraproject	leptonica fedora	Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.	CWE-125 Out-of-bounds Read	CVE-2020-36280	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197893	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.	CWE-125 Out-of-bounds Read	CVE-2020-36279	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197894	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.	CWE-125 Out-of-bounds Read	CVE-2020-36278	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197895	7.5	HIGH Network	leptonica fedoraproject debian	leptonica fedora debian_linux	Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-36277	2024-11-21 14:29	2021-03-12	Show	GitHub Exploit DB Packet Storm

197896	7.5	HIGH Network	identitymodel_project	identitymodel	An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.	NVD-CWE-noinfo	CVE-2020-36255	2024-11-21 14:29	2021-03-5	Show	GitHub Exploit DB Packet Storm

197897	5.3	MEDIUM Network	atlassian	crowd	The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d…	NVD-CWE-noinfo	CVE-2020-36240	2024-11-21 14:29	2021-03-2	Show	GitHub Exploit DB Packet Storm

197898	8.1	HIGH Network	dropbear_ssh_project	dropbear_ssh	scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.	NVD-CWE-noinfo	CVE-2020-36254	2024-11-21 14:29	2021-02-25	Show	GitHub Exploit DB Packet Storm

197899	5.0	MEDIUM Network	atlassian	atlassian-gadgets	The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36232	2024-11-21 14:29	2021-02-23	Show	GitHub Exploit DB Packet Storm

197900	4.6	MEDIUM Physics	owncloud	owncloud	The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-36248	2024-11-21 14:29	2021-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed