Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229311 7.5 危険 phpbb plusxl - PlusXL および phpBB モジュールの mods/iai/includes/constants.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5387 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
229312 7.5 危険 spamoborona - SpamOborona の admin/admin_spam.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5385 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
229313 7.5 危険 phpbb prillian - phpBB 用の Prillian French モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5326 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229314 7.5 危険 Tincan - phplist における SQL インジェクションの脆弱性 - CVE-2006-5322 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229315 4.3 警告 Tincan - phplist におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5321 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229316 5 警告 toxi - Foafgen の redir.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5319 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229317 7.8 危険 phplibre - registroTL におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5316 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229318 6.8 警告 phpBB - phpBB 用の Journals System モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5306 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229319 5.1 警告 phpBB - lat2cyr および phpbb の lat2cyr.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5305 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229320 2.1 注意 securecomputing - Secure Computing SafeWord RemoteAccess における UserCenter Web ポータルパスワードなどを取得される脆弱性 - CVE-2006-5303 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198521 4.7 MEDIUM
Local
apache oozie There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation. CWE-362
Race Condition
CVE-2020-35451 2024-11-21 14:27 2021-03-10 Show GitHub Exploit DB Packet Storm
198522 6.1 MEDIUM
Network
zohocorp manageengine_admanager_plus Zoho ManageEngine ADManager Plus before 7066 allows XSS. CWE-79
Cross-site Scripting
CVE-2020-35594 2024-11-21 14:27 2021-03-6 Show GitHub Exploit DB Packet Storm
198523 9.8 CRITICAL
Network
cgal
debian
computational_geometry_algorithms_library
debian_linux
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB read. A specially cra… - CVE-2020-35636 2024-11-21 14:27 2021-03-5 Show GitHub Exploit DB Packet Storm
198524 9.8 CRITICAL
Network
cgal
fedoraproject
debian
computational_geometry_algorithms_library
fedora
debian_linux
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->… - CVE-2020-35628 2024-11-21 14:27 2021-03-5 Show GitHub Exploit DB Packet Storm
198525 6.5 MEDIUM
Network
courier_management_system_project courier_management_system Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '. CWE-89
SQL Injection
CVE-2020-35329 2024-11-21 14:27 2021-03-5 Show GitHub Exploit DB Packet Storm
198526 5.4 MEDIUM
Network
courier_management_system_project courier_management_system Courier Management System 1.0 - 'First Name' Stored XSS CWE-79
Cross-site Scripting
CVE-2020-35328 2024-11-21 14:27 2021-03-5 Show GitHub Exploit DB Packet Storm
198527 6.5 MEDIUM
Network
courier_management_system_project courier_management_system SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php CWE-89
SQL Injection
CVE-2020-35327 2024-11-21 14:27 2021-03-5 Show GitHub Exploit DB Packet Storm
198528 7.5 HIGH
Network
thinkadmin thinkadmin ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access. CWE-798
 Use of Hard-coded Credentials
CVE-2020-35296 2024-11-21 14:27 2021-03-4 Show GitHub Exploit DB Packet Storm
198529 7.4 HIGH
Network
saltstack
fedoraproject
debian
salt
fedora
debian_linux
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated. CWE-295
Improper Certificate Validation 
CVE-2020-35662 2024-11-21 14:27 2021-02-27 Show GitHub Exploit DB Packet Storm
198530 6.1 MEDIUM
Network
acronis cyber_protect An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console. CWE-79
Cross-site Scripting
CVE-2020-35664 2024-11-21 14:27 2021-02-22 Show GitHub Exploit DB Packet Storm