Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1791 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49190 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1792 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49191 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1793 5.4 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-49192 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1794 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49193 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1795 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49194 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1796 9.8 緊急
Network 		日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-49199 2026-06-8 11:50 2026-05-29 Show GitHub Exploit DB Packet Storm
1797 8.6 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49202 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1798 8.3 重要
Adjacent 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49203 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1799 6.5 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-49204 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1800 8.2 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-50205 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344071 - panda panda_activescan The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL… CWE-94
Code Injection 		CVE-2009-3735 2018-10-13 06:56 2010-02-12 Show GitHub Exploit DB Packet Storm
344072 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-4640 2018-10-13 06:41 2006-09-13 Show GitHub Exploit DB Packet Storm
344073 - microsoft office Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a … NVD-CWE-noinfo
CWE-94
Code Injection 		CVE-2006-2389 2018-10-13 06:40 2006-07-12 Show GitHub Exploit DB Packet Storm
344074 - microsoft excel Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, w… CWE-20
 Improper Input Validation  		CVE-2006-3014 2018-10-13 06:40 2006-06-22 Show GitHub Exploit DB Packet Storm
344075 - microsoft hyperlink_object_library Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not p… NVD-CWE-noinfo
CVE-2006-3438 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344076 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RP… NVD-CWE-Other
CVE-2006-3439 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344077 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vuln… NVD-CWE-Other
CVE-2006-3440 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344078 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: wh… NVD-CWE-Other
CVE-2006-3441 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344079 - adobe flash_player Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed .swf file that results in "multiple improper memory access"… NVD-CWE-noinfo
CVE-2006-3587 2018-10-13 06:40 2006-07-14 Show GitHub Exploit DB Packet Storm
344080 - adobe flash_player Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue tha… NVD-CWE-noinfo
CVE-2006-3588 2018-10-13 06:40 2006-07-14 Show GitHub Exploit DB Packet Storm