Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1961 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35082 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
1962 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35083 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
1963 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35084 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
1964 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35085 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
1965 7.5 重要
Network 		レッドハット
GNU Project		 Redhat Enterprise Linux For Power Little Endian Els
Red Hat Enterprise Linux for IBM z Systems - Extended Updat… 		GNU Project等の複数ベンダの製品におけるAPI への入力に対する未定義の動作に関する脆弱性 CWE-475
API への入力に対する未定義の動作 		CVE-2026-42009 2026-06-9 14:11 2026-05-18 Show GitHub Exploit DB Packet Storm
1966 7.8 重要
Local 		Thermalright TR-VISION HOME ThermalrightのTR-VISION HOMEにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-4255 2026-06-9 14:11 2026-03-16 Show GitHub Exploit DB Packet Storm
1967 6.5 警告
Network 		レッドハット Red Hat OpenShift Container Platform
OpenShift Router 		レッドハットのRed Hat OpenShift Container Platform等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42965 2026-06-9 14:11 2026-05-29 Show GitHub Exploit DB Packet Storm
1968 8.7 重要
Network 		SUSE Local Path Provisioner SUSEのLocal Path Provisionerにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-44543 2026-06-9 14:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1969 9.6 緊急
Network 		Guardrails AI Guardrails AI Guardrails AIにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード 		CVE-2026-45758 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1970 7.5 重要
Network 		レッドハット Red Hat OpenShift Container Platform
OpenShift Router 		レッドハットのRed Hat OpenShift Container Platform等の複数製品における認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-46579 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343861 - wired_community_software wwwthreads Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter. NVD-CWE-Other
CVE-2006-3909 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343862 - php_live php_live PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setu… NVD-CWE-Other
CVE-2006-3911 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343863 - freeciv freeciv Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negativ… NVD-CWE-Other
CVE-2006-3913 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343864 - blackboard blackboard_academic_suite Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through dis… NVD-CWE-Other
CVE-2006-3914 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343865 - fire-mouse fire-mouse_toplist Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Sei… NVD-CWE-Other
CVE-2006-3923 2018-10-18 06:32 2006-07-29 Show GitHub Exploit DB Packet Storm
343866 - zyxel prestige_660h-61 Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script… NVD-CWE-Other
CVE-2006-3929 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343867 - mamboxchange a6mambohelpdesk PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosCon… NVD-CWE-Other
CVE-2006-3930 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343868 - tuomas_airaksinen midirecord Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via a long command line argument (filename). NOTE: This may n… NVD-CWE-Other
CVE-2006-3931 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343869 - alkacon opencms Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body. NVD-CWE-Other
CVE-2006-3933 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343870 - alkacon opencms This vulnerability is addressed in the following product release: Alkacon, OpenCms, 6.2.2 NVD-CWE-Other
CVE-2006-3933 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm