Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226731 2.6 注意 Skype Technologies S.A. - Windows 用 Skype の URI ハンドラにおける任意のファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2006-2312 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
226732 5 警告 New Atlanta Communications, LLC. - Windows 用 BlueDragon Server および Server JX におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2310 2013-12-26 15:44 2006-06-26 Show GitHub Exploit DB Packet Storm
226733 3.6 注意 Avahi - Avahi におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2288 2013-12-26 15:44 2006-05-10 Show GitHub Exploit DB Packet Storm
226734 5 警告 acftp - acFTP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2242 2013-12-26 15:44 2006-05-9 Show GitHub Exploit DB Packet Storm
226735 2.1 注意 bitrock
ProcessOne		 - Process-one ejabberd を含む製品で使用されるサードパーティ製インストーラ生成ツールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2221 2013-12-26 15:44 2006-05-5 Show GitHub Exploit DB Packet Storm
226736 5 警告 321soft - 321soft PhP-Gallery の index.php における絶対パストラバーサルの脆弱性 - CVE-2006-2211 2013-12-26 15:44 2006-05-5 Show GitHub Exploit DB Packet Storm
226737 5 警告 VWar - Virtual War の admin.php における重要な情報を取得される脆弱性 - CVE-2006-2091 2013-12-26 15:44 2006-04-29 Show GitHub Exploit DB Packet Storm
226738 5 警告 Invision Power Services, Inc - Invision Power Board の action_public/search.php における任意の PHP コードを実行される脆弱性 - CVE-2006-2059 2013-12-26 15:44 2006-04-26 Show GitHub Exploit DB Packet Storm
226739 5 警告 avant force - Avant Browser におけるコマンドライン引数を変更される脆弱性 - CVE-2006-2058 2013-12-26 15:44 2006-04-26 Show GitHub Exploit DB Packet Storm
226740 7.1 危険 WinSCP - WinSCP における任意のファイルをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3015 2013-12-26 15:44 2006-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 6.5 MEDIUM
Network 		apple safari
ipados
iphone_os
macos 		An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web c… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-43676 2026-07-1 03:23 2026-06-30 Show GitHub Exploit DB Packet Storm
12 6.5 MEDIUM
Network 		apple safari
ipados
iphone_os
macos 		The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to a… New CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free 		CVE-2026-43663 2026-07-1 03:23 2026-06-30 Show GitHub Exploit DB Packet Storm
13 6.5 MEDIUM
Network 		apple safari
ipados
iphone_os
macos 		The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to a… New CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free 		CVE-2026-39872 2026-07-1 03:22 2026-06-30 Show GitHub Exploit DB Packet Storm
14 9.1 CRITICAL
Network 		apple ipados
iphone_os
macos 		This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to cause unexpected system termination or corrupt … New CWE-20
 Improper Input Validation  		CVE-2026-39868 2026-07-1 03:22 2026-06-30 Show GitHub Exploit DB Packet Storm
15 6.5 MEDIUM
Network 		apple safari
ipados
iphone_os
macos 		An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web c… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-28979 2026-07-1 03:22 2026-06-30 Show GitHub Exploit DB Packet Storm
16 5.3 MEDIUM
Network 		apple swiftnio_http\/2 swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validatio… Update CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-28898 2026-07-1 03:20 2026-06-26 Show GitHub Exploit DB Packet Storm
17 6.5 MEDIUM
Adjacent 		- - The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment. Per the Bluetooth specification … New CWE-125
Out-of-bounds Read 		CVE-2026-9263 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
18 - - - The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability. New CWE-428
 Unquoted Search Path or Element 		CVE-2026-8864 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
19 8.1 HIGH
Network 		- - JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low-privilege users to perform full create, read, update, and delete operations on OpenAPI credentials… New CWE-862
 Missing Authorization 		CVE-2026-58377 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm
20 7.6 HIGH
Network 		- - Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database contents by supplying malicious values to… New CWE-89
SQL Injection 		CVE-2026-58376 2026-07-1 03:16 2026-07-1 Show GitHub Exploit DB Packet Storm