Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228961 7.5 危険 webinsta - WEBInsta CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4196 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
228962 5.1 警告 xmb software - XMB の memcp.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4191 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228963 2.1 注意 PHPNUKE - PHP-Nuke 用の AutoHTML モジュールの autohtml.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4190 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228964 4.9 警告 smartline - SmartLine DeviceLock における NTFS コントロールを回避される脆弱性 - CVE-2006-4184 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228965 7.5 危険 TinyWebGallery - TinyWebGallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4166 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228966 7.5 危険 phpprintanalyzer - phpPrintAnalyzer の inc/header.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4164 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228967 5 警告 xennobb - XennoBB の profile.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4161 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228968 7.8 危険 サン・マイクロシステムズ - Sun Java System Directory Server および ONE Directory Server の LDAP server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4175 2012-12-20 18:02 2007-03-23 Show GitHub Exploit DB Packet Storm
228969 5.5 警告 SquirrelMail Project - Squirrelmail 用の GPG Plugin におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4169 2012-12-20 18:02 2007-07-15 Show GitHub Exploit DB Packet Storm
228970 7.5 危険 tutti nova - Tutti Nova における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4277 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198081 8.8 HIGH
Local 		veritas cloudpoint
netbackup_cloudpoint 		An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \usr\local\ssl\openssl.cnf configuration… NVD-CWE-noinfo
CVE-2020-36162 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198082 8.8 HIGH
Local 		veritas aptare_it_analytics An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a directo… NVD-CWE-noinfo
CVE-2020-36161 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198083 8.8 HIGH
Local 		veritas system_recovery An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts to load the from \usr\local\ssl\openssl.cnf config… NVD-CWE-noinfo
CVE-2020-36160 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198084 7.5 HIGH
Network 		gjson_project gjson GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call. CWE-129
 Improper Validation of Array Index 		CVE-2020-36067 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198085 7.5 HIGH
Network 		gjson_project gjson GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. NVD-CWE-noinfo
CVE-2020-36066 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198086 5.3 MEDIUM
Network 		veritas desktop_and_laptop_option Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. NVD-CWE-noinfo
CVE-2020-36159 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
198087 6.7 MEDIUM
Local 		linux
fedoraproject
debian
netapp 		linux_kernel
fedora
debian_linux
cloud_backup
solidfire_baseboard_management_controller_firmware 		mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID… CWE-120
Classic Buffer Overflow 		CVE-2020-36158 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198088 9.8 CRITICAL
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that cou… NVD-CWE-noinfo
CVE-2020-36157 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198089 8.8 HIGH
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page cou… CWE-269
 Improper Privilege Management 		CVE-2020-36156 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
198090 9.8 CRITICAL
Network 		ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive me… CWE-269
 Improper Privilege Management 		CVE-2020-36155 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm