Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230101 7.5 危険 サン・マイクロシステムズ - Sun N1 Grid Engine のデーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2006-3941 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
230102 7.5 危険 phpBB - phpbb-Auction における SQL インジェクションの脆弱性 - CVE-2006-3940 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
230103 7.5 危険 scriptscenter - ScriptsCenter ezUpload Pro における認証なしで管理者操作を実行される脆弱性 - CVE-2006-3939 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
230104 5 警告 Dotclear - DotClear における重要な情報を取得される脆弱性 - CVE-2006-3938 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
230105 5 警告 xguestbook - x_atrix xGuestBook の post.php における重要な情報を取得される脆弱性 - CVE-2006-3937 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
230106 4 警告 Alkacon Software - Alcacon OpenCms の system/workplace/editors/editor.jsp における任意の JSP ファイルのソースコードを読まれる脆弱性 - CVE-2006-3936 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230107 6.5 警告 Alkacon Software - Alkacon OpenCms の system/workplace/views/admin/admin-main.jsp におけるブロードキャストメッセージを全ユーザへ送信される脆弱性 - CVE-2006-3935 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230108 4 警告 Alkacon Software - Alkacon OpenCms の downloadTrigger.jsp における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2006-3934 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230109 3.5 注意 Alkacon Software - Alkacon OpenCms におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3933 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
230110 5.1 警告 gonafish - Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 - CVE-2006-3932 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199271 9.8 CRITICAL
Network
water_billing_system_project water_billing_system SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php. CWE-89
SQL Injection
CVE-2020-36033 2024-11-21 14:28 2021-07-23 Show GitHub Exploit DB Packet Storm
199272 5.4 MEDIUM
Network
rukovoditel rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ent… CWE-79
Cross-site Scripting
CVE-2020-35987 2024-11-21 14:28 2021-07-10 Show GitHub Exploit DB Packet Storm
199273 5.4 MEDIUM
Network
rukovoditel rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo… CWE-79
Cross-site Scripting
CVE-2020-35986 2024-11-21 14:28 2021-07-10 Show GitHub Exploit DB Packet Storm
199274 5.4 MEDIUM
Network
rukovoditel rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente… CWE-79
Cross-site Scripting
CVE-2020-35985 2024-11-21 14:28 2021-07-10 Show GitHub Exploit DB Packet Storm
199275 5.4 MEDIUM
Network
rukovoditel rukovoditel A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente… CWE-79
Cross-site Scripting
CVE-2020-35984 2024-11-21 14:28 2021-07-10 Show GitHub Exploit DB Packet Storm
199276 6.1 MEDIUM
Network
qnap qulog_center A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc.… CWE-79
Cross-site Scripting
CVE-2020-36196 2024-11-21 14:28 2021-07-1 Show GitHub Exploit DB Packet Storm
199277 6.1 MEDIUM
Network
qnap quts_hero
qts
An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. … CWE-79
Cross-site Scripting
CVE-2020-36194 2024-11-21 14:28 2021-07-1 Show GitHub Exploit DB Packet Storm
199278 2.7 LOW
Network
bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files. CWE-22
Path Traversal
CVE-2020-35762 2024-11-21 14:28 2021-06-17 Show GitHub Exploit DB Packet Storm
199279 5.4 MEDIUM
Network
bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code. CWE-79
Cross-site Scripting
CVE-2020-35761 2024-11-21 14:28 2021-06-17 Show GitHub Exploit DB Packet Storm
199280 9.8 CRITICAL
Network
bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files). CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-35760 2024-11-21 14:28 2021-06-17 Show GitHub Exploit DB Packet Storm