Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 9.8 緊急
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるLDAP インジェクションの脆弱性 New CWE-90
LDAP インジェクション 		CVE-2026-44930 2026-05-28 14:40 2026-05-22 Show GitHub Exploit DB Packet Storm
212 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-46300 2026-05-28 14:40 2026-05-23 Show GitHub Exploit DB Packet Storm
213 5.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける競合状態に関する脆弱性 New CWE-362
競合状態 		CVE-2026-4635 2026-05-28 14:39 2026-05-22 Show GitHub Exploit DB Packet Storm
214 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 New CWE-1287
指定されたタイプの入力に対する不適切な検証 		CVE-2026-4646 2026-05-28 14:39 2026-05-22 Show GitHub Exploit DB Packet Storm
215 8.1 重要
Network 		Ruby-lang.org Ruby Ruby-lang.orgのRubyにおける競合状態に関する脆弱性 New CWE-362
競合状態 		CVE-2026-46727 2026-05-28 14:39 2026-05-22 Show GitHub Exploit DB Packet Storm
216 8.8 重要
Network 		litellm litellm LiteLLMにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-47101 2026-05-28 14:39 2026-05-21 Show GitHub Exploit DB Packet Storm
217 8.8 重要
Network 		litellm litellm LiteLLMにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-47102 2026-05-28 14:39 2026-05-21 Show GitHub Exploit DB Packet Storm
218 9.8 緊急
Network 		Joomla! Joomla! Joomla!におけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-48898 2026-05-28 14:39 2026-05-26 Show GitHub Exploit DB Packet Storm
219 9.8 緊急
Network 		Joomla! Joomla! Joomla!におけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-48899 2026-05-28 14:39 2026-05-26 Show GitHub Exploit DB Packet Storm
220 4.3 警告
Network 		Joomla! Joomla! Joomla!におけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-48900 2026-05-28 14:39 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345651 - symantec sygate_management_server SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and b… NVD-CWE-Other
CVE-2006-0522 2017-07-20 10:29 2006-02-2 Show GitHub Exploit DB Packet Storm
345652 - mybulletinboard mybulletinboard SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable. NVD-CWE-Other
CVE-2006-0523 2017-07-20 10:29 2006-02-2 Show GitHub Exploit DB Packet Storm
345653 - ashwebstudio ashnews Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2006-0524 2017-07-20 10:29 2006-02-2 Show GitHub Exploit DB Packet Storm
345654 - media2_cms shop Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG… NVD-CWE-Other
CVE-2006-0532 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345655 - cpanel cpanel Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter. CWE-79
Cross-site Scripting 		CVE-2006-0533 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345656 - ubbcentral ubb.threads SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter. NVD-CWE-Other
CVE-2006-0545 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345657 - oracle database_server Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privil… NVD-CWE-Other
CVE-2006-0547 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345658 - oracle database_server SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOT… NVD-CWE-Other
CVE-2006-0548 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345659 - oracle oracle_client Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: due to the lack of relevant details from the Oracle… NVD-CWE-Other
CVE-2006-0550 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm
345660 - oracle database_server SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to… NVD-CWE-Other
CVE-2006-0551 2017-07-20 10:29 2006-02-4 Show GitHub Exploit DB Packet Storm