Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229411 6.8 警告 yourfreescreamer - YourFreeScreamer における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3315 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
229412 7.5 危険 XOOPS - Xoops 用の Articles モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3311 2012-12-20 18:19 2007-06-21 Show GitHub Exploit DB Packet Storm
229413 4.3 警告 tdizin - TDizin の arama.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3310 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229414 7.5 危険 Simple Machines - SMF におけるメッセージの作成時に任意の PHP コードを実行され脆弱性 - CVE-2007-3309 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229415 7.5 危険 Simple Machines - SMF における CAPTCHA テストを通過される脆弱性 - CVE-2007-3308 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229416 7.5 危険 solar empire - Solar Empire の game_listing.php における SQL インジェクションの脆弱性 - CVE-2007-3307 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229417 7.5 危険 ultrize - MiniBill の crontab/run_billing.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3306 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229418 7.5 危険 spey - Spey における SQL インジェクションの脆弱性 - CVE-2007-3298 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229419 9.3 危険 迅雷 - xunlei Web Thunderbolt の ThunderServer.webThunder.1 ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 - CVE-2007-3296 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
229420 6.5 警告 yabb - YaBB におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3295 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200541 9.8 CRITICAL
Network
bigprof online_invoicing_system BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsible for issuing self-service password res… CWE-89
SQL Injection
CVE-2020-35674 2024-11-21 14:27 2022-09-29 Show GitHub Exploit DB Packet Storm
200542 5.5 MEDIUM
Local
libraw libraw In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. CWE-125
Out-of-bounds Read
CVE-2020-35535 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200543 5.5 MEDIUM
Local
libraw libraw In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-35534 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200544 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file. CWE-125
Out-of-bounds Read
CVE-2020-35533 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200545 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride fiel… CWE-125
Out-of-bounds Read
CVE-2020-35532 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200546 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. CWE-125
Out-of-bounds Read
CVE-2020-35531 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200547 5.5 MEDIUM
Local
libraw
debian
libraw
debian_linux
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. CWE-787
 Out-of-bounds Write
CVE-2020-35530 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200548 9.8 CRITICAL
Network
sqlite
netapp
sqlite
ontap_select_deploy_administration_utility
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. - CVE-2020-35527 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200549 7.5 HIGH
Network
sqlite sqlite In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CWE-476
 NULL Pointer Dereference
CVE-2020-35525 2024-11-21 14:27 2022-09-2 Show GitHub Exploit DB Packet Storm
200550 5.5 MEDIUM
Local
libjpeg-turbo libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. CWE-476
 NULL Pointer Dereference
CVE-2020-35538 2024-11-21 14:27 2022-09-1 Show GitHub Exploit DB Packet Storm