Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229741 7.5 危険 stefan ernst - Stefan Ernst Newsscript における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4666 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229742 5.1 警告 premod shadow - Premod Shadow の includes/functions_portal.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4664 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229743 7.5 危険 web-provence - Web Provence SL_Site の admin/editeur/spaw_control.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4656 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229744 5 警告 threesquared.net - threesquared.net Php download の download/index.php および download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4651 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229745 7.5 危険 sponge news - Sponge News の news.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4647 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229746 7.5 危険 phpfullannu - phpFullAnnu の modules/home.module.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4644 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229747 7.5 危険 uni-vert - Uni-Vert PhpLeague の consult/joueurs.php における SQL インジェクションの脆弱性 - CVE-2006-4643 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229748 7.5 危険 szewo - SZEWO PhpCommander におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4636 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229749 6.5 警告 Squiz - MySource Classic における任意の PHP コードを挿入される脆弱性 - CVE-2006-4635 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
229750 4.3 警告 vbzoom - VBZooM の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4634 2012-12-20 18:02 2006-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211121 5.5 MEDIUM
Local 		google android In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. Us… CWE-125
Out-of-bounds Read 		CVE-2020-0424 2024-11-21 13:53 2020-11-10 Show GitHub Exploit DB Packet Storm
211122 7.8 HIGH
Local 		google android In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploit… NVD-CWE-noinfo
CVE-2020-0418 2024-11-21 13:53 2020-11-10 Show GitHub Exploit DB Packet Storm
211123 7.8 HIGH
Local 		google android In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User int… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-0409 2024-11-21 13:53 2020-11-10 Show GitHub Exploit DB Packet Storm
211124 7.8 HIGH
Local 		google
debian 		android
debian_linux 		In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges … CWE-416
CWE-667
 Use After Free
 Improper Locking 		CVE-2020-0423 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211125 3.3 LOW
Local 		google android In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure … NVD-CWE-noinfo
CVE-2020-0422 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211126 7.8 HIGH
Local 		google android In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges need… CWE-787
CWE-755
 Out-of-bounds Write
 Improper Handling of Exceptional Conditions 		CVE-2020-0421 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211127 7.8 HIGH
Local 		google android In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution pri… CWE-787
CWE-667
CWE-862
 Out-of-bounds Write
 Improper Locking
 Missing Authorization 		CVE-2020-0420 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211128 5.5 MEDIUM
Local 		google android In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information dis… CWE-862
 Missing Authorization 		CVE-2020-0419 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211129 8.8 HIGH
Network 		google android In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution pri… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2020-0416 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm
211130 5.5 MEDIUM
Local 		google android In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges … NVD-CWE-noinfo
CVE-2020-0415 2024-11-21 13:53 2020-10-14 Show GitHub Exploit DB Packet Storm