Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229841 5.8 警告 wheatblog - wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5921 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229842 6.8 警告 SAMEDIA O.E. - SAMEDIA LandShop の ls.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5915 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229843 7.5 危険 SAMEDIA O.E. - SAMEDIA LandShop の ls.php における SQL インジェクションの脆弱性 - CVE-2006-5914 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229844 6.4 警告 web directory pro - Web Directory Pro におけるコンフィギュレーションを変更される脆弱性 - CVE-2006-5905 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229845 7.5 危険 rahul jonna - Rahul Jonna GSpace における仮想ファイルシステム操作を実行される脆弱性 - CVE-2006-5903 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229846 7.5 危険 viksoe - viksoe GMail Drive シェルエクステンションにおける仮想ファイルシステムのアクションを実行される脆弱性 - CVE-2006-5902 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229847 6.8 警告 Zend Technologies Ltd. - Zend Framework Preview の incubator/tests/Zend/Http/_files/testRedirections.php サンプルコードにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5900 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229848 5 警告 php heaven - PhpMyChat の localization/languages.lib.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5898 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229849 5 警告 php heaven - PhpMyChat Plus におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-5897 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229850 5 警告 remlab - REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 - CVE-2006-5896 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199761 7.5 HIGH
Network 		os_str_bytes_project os_str_bytes An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior. NVD-CWE-noinfo
CVE-2020-35865 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199762 7.5 HIGH
Network 		google flatbuffers An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. NVD-CWE-noinfo
CVE-2020-35864 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199763 9.8 CRITICAL
Network 		hyper hyper An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interfa… CWE-444
HTTP Request Smuggling 		CVE-2020-35863 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199764 9.8 CRITICAL
Network 		bitvec_project bitvec An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. CWE-415
CWE-416
 Double Free
 Use After Free 		CVE-2020-35862 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199765 7.5 HIGH
Network 		bumpalo_project bumpalo An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys. CWE-125
Out-of-bounds Read 		CVE-2020-35861 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199766 9.8 CRITICAL
Network 		cbox_project cbox An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code. CWE-476
 NULL Pointer Dereference 		CVE-2020-35860 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199767 9.1 CRITICAL
Network 		lucet-runtime-internals_project lucet-runtime-internals An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs ca… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-35859 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199768 9.8 CRITICAL
Network 		prost_project prost An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., AR… CWE-787
 Out-of-bounds Write 		CVE-2020-35858 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199769 7.5 HIGH
Network 		trust-dns-server_project trust-dns-server An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-35857 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199770 4.7 MEDIUM
Local 		concread_project concread An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync. CWE-362
Race Condition 		CVE-2020-35928 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm