Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229591	7.5	危険	phpMyFAQ	-	phpMyFAQ における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-6912	2012-12-20 18:02	2006-12-15	Show	GitHub Exploit DB Packet Storm

229592	10	危険	東芝	-	Toshiba Bluetooth スタックにおける管理者アクセス権限を取得される脆弱性	-	CVE-2006-6903	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229593	5.4	警告	widcomm	-	Widcomm BTW におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6897	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229594	5.4	警告	plantronic	-	Plantronic Headset の Bluetooth スタックにおける許可されていない組み合わせ操作を実行される脆弱性	-	CVE-2006-6896	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229595	2.9	注意	sony ericsson	-	Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性	-	CVE-2006-6895	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229596	10	危険	spine	-	SPINE における脆弱性	-	CVE-2006-6894	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229597	5	警告	The Tor Project	-	Tor における非表示サービスの IP アドレスを特定される脆弱性	-	CVE-2006-6893	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229598	5	警告	vz forum	-	Adp Forum における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6891	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229599	7.5	危険	voc-project	-	Voodoo chat におけるパスワードをダウンロードされる脆弱性	-	CVE-2006-6890	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

229600	5	警告	p-news	-	P-News における管理者アカウント名などを取得される脆弱性	-	CVE-2006-6888	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199921	5.7	MEDIUM Physics	logmein	lastpass	An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authenticati…	CWE-287 Improper Authentication	CVE-2020-35207	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

199922	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35202	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

199923	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35201	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

199924	6.1	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.	CWE-79 Cross-site Scripting	CVE-2020-35200	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

199925	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35199	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

199926	5.3	MEDIUM Network	awstats debian fedoraproject	awstats debian_linux fedora	In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf fo…	CWE-22 Path Traversal	CVE-2020-35176	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

199927	5.3	MEDIUM Network	frappe	frappe	Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.	NVD-CWE-noinfo	CVE-2020-35175	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

199928	5.3	MEDIUM Network	mquery_project	mquery	lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.	NVD-CWE-noinfo	CVE-2020-35149	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

199929	8.8	HIGH Network	infolific	ultimate_category_excluder	The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.	CWE-352 Origin Validation Error	CVE-2020-35135	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

199930	5.4	MEDIUM Network	phpldapadmin_project fedoraproject	phpldapadmin fedora	An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.	CWE-79 Cross-site Scripting	CVE-2020-35132	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed