Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
991	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8970	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

992	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-8971	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

993	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8972	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

994	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8973	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

995	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8974	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

996	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8975	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

997	3.3	低 Local	Siber Systems Inc.	RoboForm Password Manager	Androidアプリ「パスワード管理ロボフォーム」のintent処理における検証不備の脆弱性	CWE-357 危険な操作に対する不十分な警告	CVE-2026-47782	2026-05-21 16:37	2026-05-20	Show	GitHub Exploit DB Packet Storm

998	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月19日）	-	-	2026-05-21 16:17	2026-05-20	Show	GitHub Exploit DB Packet Storm

999	6.1	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-24710	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1000	5.3	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24711	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345441	-	sun	storedge_6130_arrays	Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.	NVD-CWE-Other	CVE-2006-4773	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345442	-	webspell	webspell	SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter.	NVD-CWE-Other	CVE-2006-4783	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345443	-	webspell	webspell	Successful exploitation requires that "magic_quotes_gpc" is disabled.	NVD-CWE-Other	CVE-2006-4783	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345444	-	moodle	moodle	Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or …	NVD-CWE-Other	CVE-2006-4784	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345445	-	moodle	moodle	Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.	NVD-CWE-Other	CVE-2006-4786	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345446	-	alphamail	alphamail	AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained fr…	NVD-CWE-Other	CVE-2006-4787	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345447	-	dws_systems_inc.	sql-ledger	SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.	NVD-CWE-Other	CVE-2006-4798	2017-07-20 10:33	2006-09-15	Show	GitHub Exploit DB Packet Storm

345448	-	drupal	drupal_userreview_module	Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	NVD-CWE-Other	CVE-2006-4821	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

345449	-	emusoft	emucms	Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page paramete…	NVD-CWE-Other	CVE-2006-4822	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

345450	-	claroline dokeos	claroline open_source_learning_and_knowledge_management_tool	PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP…	CWE-94 Code Injection	CVE-2006-4844	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm