Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229901 5.1 警告 tsep - Olaf Noehring TSEP の copyright.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3993 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
229902 7.5 危険 voc-project - Cisco Unified Wireless IP Phone 7921 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3991 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
229903 7.5 危険 phpsavant - Paul M. Jones Savant2 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3990 2012-12-20 18:02 2006-08-4 Show GitHub Exploit DB Packet Storm
229904 5 警告 scott weedon - Scott Weedon Ajax Chat の visitor/livesupport/chat.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3972 2012-12-20 18:02 2006-08-2 Show GitHub Exploit DB Packet Storm
229905 6.8 警告 scott weedon - Scott Weedon Ajax Chat の visitor/livesupport/chat.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3971 2012-12-20 18:02 2006-08-2 Show GitHub Exploit DB Packet Storm
229906 5 警告 サン・マイクロシステムズ - Sun Solaris 10 3/05 HW2 の暗号化プロバイダにおけるアプリケーションがデータ変更を検出しない脆弱性 - CVE-2006-3968 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
229907 7.5 危険 x-scripts - X-Scripts X-Poll の top.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-3960 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
229908 7.5 危険 x-scripts - X-Scripts X-Protection の protect.php における SQL インジェクションの脆弱性 - CVE-2006-3959 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
229909 4.3 警告 pkr internet - Taskjitsu におけるクロスサイトスクリプティングの脆弱性 CWE-noinfo
情報不足
CVE-2006-3958 2012-12-20 18:02 2006-07-6 Show GitHub Exploit DB Packet Storm
229910 4.3 警告 total online solutions - AWBS の contact.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3956 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198911 9.8 CRITICAL
Network
cbox_project cbox An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code. CWE-476
 NULL Pointer Dereference
CVE-2020-35860 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198912 9.1 CRITICAL
Network
lucet-runtime-internals_project lucet-runtime-internals An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs ca… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2020-35859 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198913 9.8 CRITICAL
Network
prost_project prost An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., AR… CWE-787
 Out-of-bounds Write
CVE-2020-35858 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198914 7.5 HIGH
Network
trust-dns-server_project trust-dns-server An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-35857 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198915 4.7 MEDIUM
Local
concread_project concread An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync. CWE-362
Race Condition
CVE-2020-35928 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198916 5.5 MEDIUM
Local
thex_project thex An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types. NVD-CWE-noinfo
CVE-2020-35927 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198917 9.8 CRITICAL
Network
nanorand_project nanorand An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled. CWE-330
CWE-681
 Use of Insufficiently Random Values
 Incorrect Conversion between Numeric Types
CVE-2020-35926 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198918 5.5 MEDIUM
Local
magnetic_project magnetic An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type. NVD-CWE-noinfo
CVE-2020-35925 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198919 5.5 MEDIUM
Local
try-mutex_project try-mutex An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex<T> allows cross-thread sending of a non-Send type. CWE-787
 Out-of-bounds Write
CVE-2020-35924 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
198920 5.5 MEDIUM
Local
ordered-float_project ordered-float An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN. CWE-416
 Use After Free
CVE-2020-35923 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm