Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249941	7.5	危険	Expinion.net	-	MultiCalendars における SQL インジェクションの脆弱性	-	CVE-2006-5977	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

249942	7.5	危険	drumster	-	BlogMe の admin_login.asp における SQL インジェクションの脆弱性	-	CVE-2006-5976	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

249943	6.8	警告	drumster	-	BlogMe の comments.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5975	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

249944	7.8	危険	Fetchmail Project	-	fetchmail におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2006-5974	2012-06-26 15:37	2006-12-31	Show	GitHub Exploit DB Packet Storm

249945	4.6	警告	fvwm	-	fvwm の evalFolderLine 関数における CRLF インジェクションの脆弱性	-	CVE-2006-5969	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

249946	4.6	警告	Alt-N	-	MDaemon における任意のコードを実行される脆弱性	-	CVE-2006-5968	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

249947	7.5	危険	20 20 applications	-	20/20 DataShed の listings.asp における SQL インジェクションの脆弱性	-	CVE-2006-5955	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

249948	7.5	危険	asp smiley	-	ASP Smiley の admin/default.asp における SQL インジェクションの脆弱性	-	CVE-2006-5952	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

249949	7.5	危険	exophpdesk	-	Exophpdesk の pipe.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5951	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

249950	5	警告	altools	-	ALTools ALFTP FTP Server におけるインストールパスを取得される脆弱性	-	CVE-2006-5950	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209071	5.7	MEDIUM Physics	logmein	lastpass	An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authent…	CWE-287 Improper Authentication	CVE-2020-35208	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209072	5.7	MEDIUM Physics	logmein	lastpass	An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authenticati…	CWE-287 Improper Authentication	CVE-2020-35207	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209073	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35202	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209074	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35201	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209075	6.1	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.	CWE-79 Cross-site Scripting	CVE-2020-35200	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209076	5.4	MEDIUM Network	igniterealtime	openfire	Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-35199	2024-11-21 14:26	2020-12-13	Show	GitHub Exploit DB Packet Storm

209077	5.3	MEDIUM Network	awstats debian fedoraproject	awstats debian_linux fedora	In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf fo…	CWE-22 Path Traversal	CVE-2020-35176	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

209078	5.3	MEDIUM Network	frappe	frappe	Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.	NVD-CWE-noinfo	CVE-2020-35175	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

209079	5.3	MEDIUM Network	mquery_project	mquery	lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.	NVD-CWE-noinfo	CVE-2020-35149	2024-11-21 14:26	2020-12-12	Show	GitHub Exploit DB Packet Storm

209080	8.8	HIGH Network	infolific	ultimate_category_excluder	The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.	CWE-352 Origin Validation Error	CVE-2020-35135	2024-11-21 14:26	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed