Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229341 5.1 警告 phpmyteam - phpMyTeam の images/smileys/smileys_packs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5207 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
229342 10 危険 トレンドマイクロ - Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5269 2012-12-20 18:02 2008-11-17 Show GitHub Exploit DB Packet Storm
229343 10 危険 トレンドマイクロ - Trend Micro ServerProtect における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2006-5268 2012-12-20 18:02 2008-11-17 Show GitHub Exploit DB Packet Storm
229344 7.5 危険 phplibre - registroTL の main.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5315 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229345 7.5 危険 phplibre - TribunaLibre の ftag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5314 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229346 7.5 危険 phpBB - phpBB 用の Ajax Shoutbox モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5312 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229347 7.5 危険 phpBB - phpBB 用の Prillian French モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5309 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229348 4 警告 winzip - WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2006-5198 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
229349 6.8 警告 wheatblog - Wheatblog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5195 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
229350 7.5 危険 wikyblog - Josh Schmidt WikyBlog の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5193 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198631 5.3 MEDIUM
Network 		frappe frappe Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API. NVD-CWE-noinfo
CVE-2020-35175 2024-11-21 14:26 2020-12-12 Show GitHub Exploit DB Packet Storm
198632 5.3 MEDIUM
Network 		mquery_project mquery lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation. NVD-CWE-noinfo
CVE-2020-35149 2024-11-21 14:26 2020-12-12 Show GitHub Exploit DB Packet Storm
198633 8.8 HIGH
Network 		infolific ultimate_category_excluder The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. CWE-352
 Origin Validation Error 		CVE-2020-35135 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
198634 5.4 MEDIUM
Network 		phpldapadmin_project
fedoraproject 		phpldapadmin
fedora 		An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php. CWE-79
Cross-site Scripting 		CVE-2020-35132 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
198635 5.4 MEDIUM
Network 		igniterealtime openfire Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS. CWE-79
Cross-site Scripting 		CVE-2020-35127 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
198636 4.8 MEDIUM
Network 		typesettercms typesetter Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are conside… CWE-79
Cross-site Scripting 		CVE-2020-35126 2024-11-21 14:26 2020-12-11 Show GitHub Exploit DB Packet Storm
198637 7.1 HIGH
Network 		oracle configuration_manager Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). The supported version that is affected is 12.1.2.0.6. Easily explo… NVD-CWE-noinfo
CVE-2020-2984 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
198638 7.1 HIGH
Network 		oracle data_masking_and_subsetting Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploita… NVD-CWE-noinfo
CVE-2020-2983 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
198639 7.1 HIGH
Network 		oracle enterprise_manager_base_platform Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. E… NVD-CWE-noinfo
CVE-2020-2982 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm
198640 7.0 HIGH
Local 		oracle berkeley_db Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with lo… NVD-CWE-noinfo
CVE-2020-2981 2024-11-21 14:26 2020-07-16 Show GitHub Exploit DB Packet Storm