Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1591 4.3 警告
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい
CVE-2026-0887 2026-01-27 17:33 2026-01-13 Show GitHub Exploit DB Packet Storm
1592 5.3 警告
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-0888 2026-01-27 17:33 2026-01-13 Show GitHub Exploit DB Packet Storm
1593 5.4 警告
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2026-0890 2026-01-27 17:33 2026-01-13 Show GitHub Exploit DB Packet Storm
1594 8.1 重要
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-0891 2026-01-27 17:33 2026-01-13 Show GitHub Exploit DB Packet Storm
1595 9.8 緊急
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-0892 2026-01-27 17:33 2026-01-13 Show GitHub Exploit DB Packet Storm
1596 9.8 緊急
Network
シスコシステムズ Cisco Unified Communications Manager IM and Presence Service
Cisco Unity Connection
Cisco Unified Communications Manager
シスコシステムズのCisco Unified Communications Manager等の複数製品におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-20045 2026-01-27 17:33 2026-01-21 Show GitHub Exploit DB Packet Storm
1597 4.3 警告
Network
NetApp ONTAP NetAppのONTAPにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-22050 2026-01-27 17:33 2026-01-12 Show GitHub Exploit DB Packet Storm
1598 9.8 緊急
Network
Docmost Docmost Docmostにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-22249 2026-01-27 17:33 2026-01-15 Show GitHub Exploit DB Packet Storm
1599 9.8 緊急
Network
Tencent WeKnora TencentのWeKnoraにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-22687 2026-01-27 17:33 2026-01-10 Show GitHub Exploit DB Packet Storm
1600 8.8 重要
Network
Tencent WeKnora TencentのWeKnoraにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-22688 2026-01-27 17:32 2026-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282821 - total_online_solutions advanced_webhost_billing_system Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) … NVD-CWE-Other
CVE-2006-3956 2018-10-18 06:32 2006-08-2 Show GitHub Exploit DB Packet Storm
282822 - mcafee antispyware
internet_security_suite
personal_firewall_plus
privacy_service
quickclean
security_center
spamkiller
virusscan
wireless_home_network_security
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privac… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3961 2018-10-18 06:32 2006-08-2 Show GitHub Exploit DB Packet Storm
282823 - carlos_sanchez_valle
php_layers_menu
mynewsgroups
php_layers_menu
PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code… CWE-94
Code Injection
CVE-2006-3966 2018-10-18 06:32 2006-08-2 Show GitHub Exploit DB Packet Storm
282824 - moskool moskool PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the … NVD-CWE-Other
CVE-2006-3967 2018-10-18 06:32 2006-08-2 Show GitHub Exploit DB Packet Storm
282825 - my_firewall_plus my_firewall_plus My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges. NVD-CWE-Other
CVE-2006-3973 2018-10-18 06:32 2006-11-22 Show GitHub Exploit DB Packet Storm
282826 - mambo mambo_gallery_manager PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary P… CWE-94
Code Injection
CVE-2006-3980 2018-10-18 06:32 2006-08-5 Show GitHub Exploit DB Packet Storm
282827 - knusperleicht quickie PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter. NVD-CWE-Other
CVE-2006-3982 2018-10-18 06:32 2006-08-5 Show GitHub Exploit DB Packet Storm
282828 - gianluca_baldo
phpadsnew
phpauction
phpadsnew
PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP co… NVD-CWE-Other
CVE-2006-3984 2018-10-18 06:32 2006-08-5 Show GitHub Exploit DB Packet Storm
282829 - conexware powerarchiver Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that alrea… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3985 2018-10-18 06:32 2006-08-5 Show GitHub Exploit DB Packet Storm
282830 - conexware powerarchiver This vulnerability is addressed in the following product release: ConeXware, PowerArchiver, 9.63 CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3985 2018-10-18 06:32 2006-08-5 Show GitHub Exploit DB Packet Storm