Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240061 5 警告 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6638 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
240062 7.5 危険 jumbacms - JumbaCMS の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6635 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240063 7.5 危険 Mambo Foundation - Mambo 用の extcalendar コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6634 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240064 6.8 警告 ibiblio - osprey の lib/xml/oai/GetRecord.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6631 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240065 7.5 危険 ibiblio - osprey の ListRecords.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6630 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240066 4.3 警告 OpenOffice.org Project - OOo における整数オーバーフローの脆弱性 - CVE-2006-6628 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240067 6.8 警告 Moodle - Moodle のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6626 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240068 6.8 警告 Moodle - Moodle の mod/forum/discuss.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6625 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240069 6.5 警告 マイクロソフト - Microsoft Project Server 2003 における MSProjectUser パスワードを取得される脆弱性 - CVE-2006-6617 2012-09-25 15:36 2006-12-18 Show GitHub Exploit DB Packet Storm
240070 7.5 危険 mxbb - mxBB 用の mx_act モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6615 2012-09-25 15:36 2006-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1221 8.1 HIGH
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l… New CWE-20
CWE-807
 Improper Input Validation 
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-43935 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1222 - - - Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th… New CWE-552
CWE-918
 Files or Directories Accessible to External Parties
Server-Side Request Forgery (SSRF)  		CVE-2026-40564 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1223 - - - An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability. New CWE-22
Path Traversal 		CVE-2026-40384 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1224 - - - An improper access check allows unauthorized access to com_config webservice endpoints. New CWE-284
Improper Access Control 		CVE-2026-35223 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1225 - - - A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-2264 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1226 7.8 HIGH
Local 		- - NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24162 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1227 5.3 MEDIUM
Network 		- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the inst… New CWE-1392
 Use of Default Credentials 		CVE-2025-36221 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1228 4.3 MEDIUM
Network 		- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, … New CWE-89
SQL Injection 		CVE-2025-36220 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1229 5.4 MEDIUM
Network 		- - IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… New CWE-79
Cross-site Scripting 		CVE-2025-36148 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1230 5.4 MEDIUM
Network 		- - IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. New CWE-923
 Improper Restriction of Communication Channel to Intended Endpoints 		CVE-2025-36145 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm