Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2121	9.8	緊急 Network	Splunk	Splunk	Splunkにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-20253	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

2122	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-20254	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

2123	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-20255	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

2124	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-20256	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2125	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-20257	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2126	5.4	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20258	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2127	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22893	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2128	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-24716	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2129	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24719	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

2130	5.3	警告 Network	NAVTOR AS	NavBox Firmware	NAVTOR ASのNavBox Firmwareにおけるエラーメッセージによる情報漏えいに関する脆弱性	CWE-209 エラーメッセージによる情報漏えい	CVE-2026-2752	2026-06-16 13:38	2026-03-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
343621	-	php	php	Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size …	NVD-CWE-Other	CVE-2006-4484	2018-10-31 01:25	2006-09-1	Show	GitHub Exploit DB Packet Storm

343622	-	php	php	The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.	NVD-CWE-Other	CVE-2006-4485	2018-10-31 01:25	2006-09-1	Show	GitHub Exploit DB Packet Storm

343623	-	php	php	Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.	CWE-189 Numeric Errors	CVE-2006-4486	2018-10-31 01:25	2006-09-1	Show	GitHub Exploit DB Packet Storm

343624	-	microsoft	office	Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a…	NVD-CWE-noinfo	CVE-2006-4534	2018-10-31 01:25	2006-09-6	Show	GitHub Exploit DB Packet Storm

343625	-	php	php	PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets th…	NVD-CWE-Other	CVE-2006-4625	2018-10-31 01:25	2006-09-13	Show	GitHub Exploit DB Packet Storm

343626	-	ffmpeg	ffmpeg	Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1)…	NVD-CWE-Other	CVE-2006-4800	2018-10-31 01:25	2006-09-15	Show	GitHub Exploit DB Packet Storm

343627	-	cisco	ids_sensor_software ips_sensor_software	The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) vi…	NVD-CWE-Other	CVE-2006-4910	2018-10-31 01:25	2006-09-21	Show	GitHub Exploit DB Packet Storm

343628	-	sun	solaris sunos	The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or lo…	NVD-CWE-Other	CVE-2005-0248	2018-10-31 01:25	2005-05-2	Show	GitHub Exploit DB Packet Storm

343629	-	sun	solaris sunos	Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.	NVD-CWE-Other	CVE-2005-0426	2018-10-31 01:25	2005-05-2	Show	GitHub Exploit DB Packet Storm

343630	-	cisco	application_and_content_networking_software content_delivery_manager content_distribution_manager_4630 content_distribution_manager_4650 content_distribution_manager_4670 content_engin…	The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.	NVD-CWE-Other	CVE-2005-0598	2018-10-31 01:25	2005-02-24	Show	GitHub Exploit DB Packet Storm