Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229191	4.6	警告	rocks clusters	-	Rocks Clusters における権限を取得される脆弱性	-	CVE-2006-3693	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229192	7.5	危険	vbzoom	-	VBZooM における SQL インジェクションの脆弱性	-	CVE-2006-3691	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229193	7.5	危険	miniBB	-	MiniBB Forum における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3690	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229194	7.5	危険	francisco charrua	-	Fransisco Charrua Photo-Gallery の Room.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-3688	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229195	7.5	危険	D-Link Systems, Inc.	-	D-Link DI-524 の UPnP サービス内におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3687	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229196	5	警告	ヒューレット・パッカード	-	HP Open VMS の [SYSEXE]SMPUTIL.EXE におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3686	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229197	5.1	警告	czaries network	-	CzarNews における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3685	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229198	7.5	危険	softcomplex	-	SoftComplex PHP Event Calendar の calendar.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3684	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229199	7.5	危険	flipper poll	-	Flipper Poll の poll.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3683	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

229200	5	警告	Laurent Destailleur	-	AWStats の awstats.pl におけるインストールパスを取得される脆弱性	-	CVE-2006-3682	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198431	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35201	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198432	6.1	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.	CWE-79 Cross-site Scripting	CVE-2020-35200	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198433	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35199	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

198434	5.3	MEDIUM Network	awstats debian fedoraproject	awstats debian_linux fedora	In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf fo…	CWE-22 Path Traversal	CVE-2020-35176	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198435	5.3	MEDIUM Network	frappe	frappe	Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.	NVD-CWE-noinfo	CVE-2020-35175	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198436	5.3	MEDIUM Network	mquery_project	mquery	lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.	NVD-CWE-noinfo	CVE-2020-35149	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

198437	8.8	HIGH Network	infolific	ultimate_category_excluder	The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.	CWE-352 Origin Validation Error	CVE-2020-35135	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198438	5.4	MEDIUM Network	phpldapadmin_project fedoraproject	phpldapadmin fedora	An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.	CWE-79 Cross-site Scripting	CVE-2020-35132	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198439	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35127	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

198440	4.8	MEDIUM Network	typesettercms	typesetter	Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are conside…	CWE-79 Cross-site Scripting	CVE-2020-35126	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed