Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229641	6.4	警告	pixel motion	-	Blog Pixel Motion における管理ユーザに対するユーザ名およびパスワードを変更される脆弱性	-	CVE-2006-5086	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

229642	7.5	危険	pixel motion	-	Blog Pixel Motion の config.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-5085	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

229643	7.5	危険	Skype Technologies S.A.	-	Mac 用の eBay Skype におけるフォーマットストリングの脆弱性	CWE-20 不適切な入力確認	CVE-2006-5084	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

229644	7.5	危険	phpbb security	-	IM Portal の includes/functions_portal.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5083	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

229645	7.5	危険	SugarCRM	-	SugarCRM における脆弱性	CWE-noinfo 情報不足	CVE-2006-5082	2012-12-20 18:02	2006-09-17	Show	GitHub Exploit DB Packet Storm

229646	7.5	危険	polaring	-	Kristian Niemi Polaring の view/general.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5078	2012-12-20 18:02	2006-09-28	Show	GitHub Exploit DB Packet Storm

229647	2.6	注意	TYPO3 Association	-	TYPO3 用の class.tx_indexedsearch.php エクステンションにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5069	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229648	5.1	警告	zoomstats	-	ZoomStats の libs/dbmax/mysql.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5065	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229649	5.1	警告	stefan ritt	-	Elog におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5063	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229650	5.1	警告	wired community software	-	WWWthreads におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5059	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199131	8.8	HIGH Network	themexa	secure_file_manager	vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFin…	NVD-CWE-noinfo	CVE-2020-35235	2024-11-21 14:27	2020-12-14	Show	GitHub Exploit DB Packet Storm

199132	7.5	HIGH Network	wp-ecommerce	easy_wp_smtp	The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ direc…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-35234	2024-11-21 14:27	2020-12-14	Show	GitHub Exploit DB Packet Storm

199133	-		-	-	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.	-	CVE-2020-35165	2024-11-21 14:26	2024-05-22	Show	GitHub Exploit DB Packet Storm

199134	7.5	HIGH Network	facuet	ryu	An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-35141	2024-11-21 14:26	2023-08-11	Show	GitHub Exploit DB Packet Storm

199135	7.5	HIGH Network	facuet	ryu	An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-35139	2024-11-21 14:26	2023-08-11	Show	GitHub Exploit DB Packet Storm

199136	9.8	CRITICAL Network	dell oracle	bsafe_micro-edition-suite bsafe_crypto-c-micro-edition http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.	CWE-20 Improper Input Validation	CVE-2020-35169	2024-11-21 14:26	2022-07-12	Show	GitHub Exploit DB Packet Storm

199137	9.8	CRITICAL Network	dell oracle	bsafe_crypto-c-micro-edition bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.	NVD-CWE-Other	CVE-2020-35168	2024-11-21 14:26	2022-07-12	Show	GitHub Exploit DB Packet Storm

199138	9.8	CRITICAL Network	dell oracle	bsafe_crypto-c-micro-edition bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.	NVD-CWE-Other	CVE-2020-35167	2024-11-21 14:26	2022-07-12	Show	GitHub Exploit DB Packet Storm

199139	9.8	CRITICAL Network	dell oracle	bsafe_crypto-c-micro-edition bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.	NVD-CWE-Other	CVE-2020-35166	2024-11-21 14:26	2022-07-12	Show	GitHub Exploit DB Packet Storm

199140	8.1	HIGH Network	dell oracle	bsafe_crypto-c-micro-edition bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.	NVD-CWE-Other	CVE-2020-35164	2024-11-21 14:26	2022-07-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed