Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229921 4 警告 Alkacon Software - Alcacon OpenCms の system/workplace/editors/editor.jsp における任意の JSP ファイルのソースコードを読まれる脆弱性 - CVE-2006-3936 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
229922 6.5 警告 Alkacon Software - Alkacon OpenCms の system/workplace/views/admin/admin-main.jsp におけるブロードキャストメッセージを全ユーザへ送信される脆弱性 - CVE-2006-3935 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
229923 4 警告 Alkacon Software - Alkacon OpenCms の downloadTrigger.jsp における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-3934 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
229924 3.5 注意 Alkacon Software - Alkacon OpenCms におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3933 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229925 5.1 警告 gonafish - Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 - CVE-2006-3932 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229926 4.6 警告 tuomas airaksinen - Tuomas Airaksinen Midirecord の midirecord.cc におけるバッファオーバーフローの脆弱性 - CVE-2006-3931 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229927 7.5 危険 mamboxchange - a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3930 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229928 4.3 警告 ZyXEL - Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3929 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229929 7.5 危険 mikael software - WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3928 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229930 4.3 警告 phpprobid - PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3927 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199041 6.1 MEDIUM
Network 		gollum_project gollum Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog. CWE-79
Cross-site Scripting 		CVE-2020-35305 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
199042 5.4 MEDIUM
Network 		multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php. CWE-79
Cross-site Scripting 		CVE-2020-35261 2024-11-21 14:27 2022-07-15 Show GitHub Exploit DB Packet Storm
199043 8.8 HIGH
Network 		victor_cms_project victor_cms Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_u… CWE-89
SQL Injection 		CVE-2020-35597 2024-11-21 14:27 2022-06-17 Show GitHub Exploit DB Packet Storm
199044 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35632 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm
199045 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35631 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm
199046 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35630 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm
199047 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-35629 2024-11-21 14:27 2022-04-19 Show GitHub Exploit DB Packet Storm
199048 3.4 LOW
Local 		linux
redhat 		linux_kernel
enterprise_linux 		A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem NVD-CWE-Other
CVE-2020-35501 2024-11-21 14:27 2022-03-31 Show GitHub Exploit DB Packet Storm
199049 5.3 MEDIUM
Network 		utimf uti_mutual_fund_invest_online An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid creden… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-35398 2024-11-21 14:27 2021-12-24 Show GitHub Exploit DB Packet Storm
199050 5.9 MEDIUM
Network 		atomix atomix An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. CWE-362
Race Condition 		CVE-2020-35216 2024-11-21 14:27 2021-12-17 Show GitHub Exploit DB Packet Storm