Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240051 2.1 注意 NetBSD - NetBSD の ptrace におけるカーネルメモリを読み取られる脆弱性 - CVE-2006-6656 2012-09-25 15:36 2006-11-27 Show GitHub Exploit DB Packet Storm
240052 1.7 注意 NetBSD - NetBSD の procfs 実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6655 2012-09-25 15:36 2006-11-27 Show GitHub Exploit DB Packet Storm
240053 4.3 警告 NetBSD - NetBSD の sendmsg 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6654 2012-09-25 15:36 2006-11-27 Show GitHub Exploit DB Packet Storm
240054 1.7 注意 NetBSD - NetBSD の accept 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6653 2012-09-25 15:36 2006-11-27 Show GitHub Exploit DB Packet Storm
240055 6.8 警告 インテル - Intel 2200BG ワイアレスドライバの W29N51.SYS における任意のコードを実行される脆弱性 - CVE-2006-6651 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240056 6.8 警告 mxbb - mxBB 用の mx_charts における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6650 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240057 6.8 警告 hypervm - HyperVM の display.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6649 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240058 7.5 危険 mxbb - mxBB 用の mx_links における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6645 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240059 6.8 警告 mxbb - mxBB 用の mx_meeting における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6644 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240060 6.8 警告 omniture - Omniture SiteCatalyst におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6640 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1211 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL guard already present in l2cap_sock_resu… New - CVE-2026-45835 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1212 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume… New - CVE-2026-45834 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1213 7.5 HIGH
Network 		microsoft defender_antimalware_platform Microsoft Defender Denial of Service Vulnerability Update CWE-400
NVD-CWE-noinfo
 Uncontrolled Resource Consumption 		CVE-2026-45498 2026-05-27 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1214 6.1 MEDIUM
Network 		- - A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0,… New CWE-79
Cross-site Scripting 		CVE-2026-45249 2026-05-27 02:16 2026-05-25 Show GitHub Exploit DB Packet Storm
1215 5.0 MEDIUM
Network 		- - Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate … New CWE-78
CWE-1336
OS Command 
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-44723 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1216 7.6 HIGH
Network 		- - MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper … New CWE-89
SQL Injection 		CVE-2026-44680 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1217 4.3 MEDIUM
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsing. The original validation logic parsed… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44502 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1218 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-supplied directory but performs no boundary c… New CWE-22
Path Traversal 		CVE-2026-43982 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1219 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Sin… New CWE-362
Race Condition 		CVE-2026-43981 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1220 4.3 MEDIUM
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "M… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43936 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm