Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229791 7.5 危険 visualshapers - Visual Shapers ezContents における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4477 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229792 7.5 危険 Simple Machines - SMF における任意のローカルファイルを読むディレクトリトラバーサル攻撃を実行される脆弱性 - CVE-2006-4467 2012-12-20 18:02 2006-08-19 Show GitHub Exploit DB Packet Storm
229793 6.4 警告 phpgroupware - phpGroupWare の calendar/inc/class.holidaycalc.inc.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4458 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229794 7.5 危険 phpecard - phpECard の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4457 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229795 7.5 危険 phpecard - phpECard の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4456 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
229796 4.3 警告 PmWiki - PmWiki におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4453 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
229797 7.5 危険 web3king - Web3news の security/include/_class.security.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4452 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
229798 5.1 警告 phpBB - PHPBB の usercp_avatar.php における Web のプロキシとしてサーバが使用される脆弱性 - CVE-2006-4450 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
229799 7.2 危険 X.Org Foundation - libX11 などを含む X.Org および XFree86 における権限を取得される脆弱性 - CVE-2006-4447 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
229800 7.5 危険 venture nine - Tagger LE における任意の PHP コードを実行される脆弱性 - CVE-2006-4437 2012-12-20 18:02 2006-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199081 7.5 HIGH
Network
arc-swap_project arc-swap An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of … NVD-CWE-noinfo
CVE-2020-35711 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
199082 5.3 MEDIUM
Network
parallels remote_application_server Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the… CWE-200
Information Exposure
CVE-2020-35710 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
199083 4.9 MEDIUM
Network
bloofox bloofoxcms bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application/octet-stream") to ../media/images/ via the admin/index.php?mode=tools&page=upload URI, aka directory t… CWE-22
Path Traversal
CVE-2020-35709 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
199084 7.2 HIGH
Network
phplist phplist phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page. CWE-89
SQL Injection
CVE-2020-35708 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199085 5.4 MEDIUM
Network
daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. CWE-79
Cross-site Scripting
CVE-2020-35707 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199086 5.4 MEDIUM
Network
daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. CWE-79
Cross-site Scripting
CVE-2020-35706 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199087 5.4 MEDIUM
Network
daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. CWE-79
Cross-site Scripting
CVE-2020-35705 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199088 5.4 MEDIUM
Network
daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. CWE-79
Cross-site Scripting
CVE-2020-35704 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199089 7.8 HIGH
Local
freedesktop poppler DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones … CWE-787
 Out-of-bounds Write
CVE-2020-35702 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
199090 8.8 HIGH
Adjacent
google android On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without… NVD-CWE-noinfo
CVE-2020-35693 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm