Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248431 5.1 警告 bolinos - BolinOS の system/_b/contentFiles/gBIndex.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4850 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
248432 5.1 警告 シトリックス・システムズ - Citrix Access Gateway with AAC における認証を回避される脆弱性 - CVE-2006-4846 2012-06-26 15:37 2006-09-14 Show GitHub Exploit DB Packet Storm
248433 5.1 警告 george lewe - TeamCal Pro の includes/footer.html.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4845 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
248434 5.1 警告 Claroline Consortium
Dokeos		 - Dokeos などの製品で使用される Claroline の inc/claro_init_local.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4844 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
248435 4.3 警告 codeworx technologies - DCP-Portal SE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4838 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
248436 7.5 危険 codeworx technologies - DCP-Portal SE における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4837 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
248437 5.1 警告 codeworx technologies - DCP-Portal SE の login.php における SQL インジェクションの脆弱性 - CVE-2006-4836 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
248438 5 警告 bluview - Bluview BMB における重要な情報を取得される脆弱性 - CVE-2006-4835 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
248439 10 危険 blojsom - David Czarnecki Blojsom の EditBlogTemplatesPlugin.java におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4830 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
248440 6.8 警告 blojsom - David Czarnecki Blojsom におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4829 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211981 7.5 HIGH
Network 		metinfo metinfo An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information. CWE-22
Path Traversal 		CVE-2020-19304 2024-11-21 14:09 2021-08-4 Show GitHub Exploit DB Packet Storm
211982 7.8 HIGH
Local 		houdunren hdcms An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-19303 2024-11-21 14:09 2021-08-4 Show GitHub Exploit DB Packet Storm
211983 9.8 CRITICAL
Network 		vaethink vaethink An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php". CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-19302 2024-11-21 14:09 2021-08-4 Show GitHub Exploit DB Packet Storm
211984 9.8 CRITICAL
Network 		vaethink vaethink A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter. CWE-863
 Incorrect Authorization 		CVE-2020-19301 2024-11-21 14:09 2021-08-4 Show GitHub Exploit DB Packet Storm
211985 8.8 HIGH
Network 		struktur libheif An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read. CWE-125
Out-of-bounds Read 		CVE-2020-19499 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
211986 8.8 HIGH
Network 		struktur libheif Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts. NVD-CWE-noinfo
CVE-2020-19498 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
211987 8.8 HIGH
Network 		matio_project matio Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-19497 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
211988 7.8 HIGH
Local 		sam2p_project sam2p There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. NVD-CWE-noinfo
CVE-2020-19492 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
211989 7.8 HIGH
Local 		sam2p_project sam2p There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. CWE-787
 Out-of-bounds Write 		CVE-2020-19491 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm
211990 5.5 MEDIUM
Local 		tinyexr_project tinyexr tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-19490 2024-11-21 14:09 2021-07-22 Show GitHub Exploit DB Packet Storm