Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229131	7.5	危険	ufo2000	-	UFO2000 の multiplay.cpp におけるバッファオーバーフローの脆弱性	-	CVE-2006-3788	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229132	2.1	注意	Kerio Technologies	-	Sunbelt Kerio Personal Firewall の kpf4ss.exe におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3787	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229133	3.6	注意	シマンテック	-	Symantec pcAnywhere におけるカスタム .cif ファイルを生成される脆弱性	-	CVE-2006-3786	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229134	2.1	注意	シマンテック	-	Symantec pcAnywhere におけるパスワードを取得される脆弱性	-	CVE-2006-3785	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229135	7.2	危険	シマンテック	-	Symantec pcAnywhere における権限を取得される脆弱性	-	CVE-2006-3784	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229136	5	警告	keyifweb	-	Keyifweb Keyif Portal におけるデータベースをダウンロードされる脆弱性	-	CVE-2006-3780	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229137	6.5	警告	シトリックス・システムズ	-	Citrix MetaFrame における権限を取得される脆弱性	-	CVE-2006-3779	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229138	7.5	危険	idevSpot	-	IDevSpot PhpLinkExchange の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3777	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229139	7.5	危険	idevSpot	-	IDevSpot PhpHostBot および AutoHost の order/index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3776	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

229140	7.5	危険	mybulletinboard	-	MyBB の class_session.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-3775	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198431	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35201	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198432	6.1	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.	CWE-79 Cross-site Scripting	CVE-2020-35200	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198433	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35199	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198434	5.3	MEDIUM Network	awstats debian fedoraproject	awstats debian_linux fedora	In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf fo…	CWE-22 Path Traversal	CVE-2020-35176	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198435	5.3	MEDIUM Network	frappe	frappe	Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.	NVD-CWE-noinfo	CVE-2020-35175	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198436	5.3	MEDIUM Network	mquery_project	mquery	lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.	NVD-CWE-noinfo	CVE-2020-35149	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198437	8.8	HIGH Network	infolific	ultimate_category_excluder	The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.	CWE-352 Origin Validation Error	CVE-2020-35135	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198438	5.4	MEDIUM Network	phpldapadmin_project fedoraproject	phpldapadmin fedora	An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.	CWE-79 Cross-site Scripting	CVE-2020-35132	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198439	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35127	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198440	4.8	MEDIUM Network	typesettercms	typesetter	Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are conside…	CWE-79 Cross-site Scripting	CVE-2020-35126	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed