Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1381 7.5 重要
Network
Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2026-37233 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
1382 7.5 重要
Network
Mosaic5G Flexric Mosaic5GのFlexricにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-37235 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
1383 4.9 警告
Network
MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-40425 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
1384 7.5 重要
Network
bitwiseshiftleft Stanford Javascript Crypto Library bitwiseshiftleftのStanford Javascript Crypto Libraryにおける複数の脆弱性 CWE-325
CWE-347
CVE-2026-4258 2026-06-5 10:51 2026-03-17 Show GitHub Exploit DB Packet Storm
1385 9.9 緊急
Network
Linux Foundation CloudNativePG Linux FoundationのCloudNativePGにおける複数の脆弱性 CWE-250
CWE-271
CWE-426
CVE-2026-44477 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
1386 9.6 緊急
Network
John Pettitt (jpettitt) MeshCore Card John Pettitt (jpettitt)のMeshCore Cardにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45323 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
1387 6.5 警告
Network
Spring AI Community MCP Security Spring AI CommunityのMCP Securityにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45609 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
1388 5.5 警告
Local
opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-20
CWE-248
CVE-2026-45676 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
1389 7.5 重要
Network
opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-20
CWE-754
CVE-2026-45678 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
1390 6.5 警告
Network
opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-117
CWE-532
CVE-2026-45679 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344911 - asp_stats_generator asp_stats_generator Upgrade to ASP Stats Generator version 2.1.2 : http://www.weppos.com/asg/en/download.asp NVD-CWE-Other
CVE-2006-3184 2017-10-19 10:29 2006-06-23 Show GitHub Exploit DB Packet Storm
344912 - php_web_scripts ad_manager_pro PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspecified vectors in a… NVD-CWE-Other
CVE-2006-3192 2017-10-19 10:29 2006-06-23 Show GitHub Exploit DB Packet Storm
344913 - grayscale bandsite_cms Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path p… CWE-94
Code Injection
CVE-2006-3193 2017-10-19 10:29 2006-06-23 Show GitHub Exploit DB Packet Storm
344914 - softnews_media_group datalife_engine SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo sub… NVD-CWE-Other
CVE-2006-3221 2017-10-19 10:29 2006-06-24 Show GitHub Exploit DB Packet Storm
344915 - nullsoft winamp Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file. NVD-CWE-Other
CVE-2006-3228 2017-10-19 10:29 2006-06-27 Show GitHub Exploit DB Packet Storm
344916 - magnet bee-hive_lite Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) header… NVD-CWE-Other
CVE-2006-3266 2017-10-19 10:29 2006-06-28 Show GitHub Exploit DB Packet Storm
344917 - thorcms thorcms PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2006-3269 2017-10-19 10:29 2006-06-29 Show GitHub Exploit DB Packet Storm
344918 - cbsms mambo_module PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a … NVD-CWE-Other
CVE-2006-3294 2017-10-19 10:29 2006-06-29 Show GitHub Exploit DB Packet Storm
344919 - phpmysms phpmysms PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter. NVD-CWE-Other
CVE-2006-3300 2017-10-19 10:29 2006-06-29 Show GitHub Exploit DB Packet Storm
344920 - internet_scout_project scout_portal_toolkit SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NVD-CWE-Other
CVE-2006-3309 2017-10-19 10:29 2006-06-29 Show GitHub Exploit DB Packet Storm