Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242491 7.5 危険 mdweb - MDweb における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5587 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242492 9.3 危険 マイクロソフト - Microsoft Office 2003 などの Multilingual Interface における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2006-5574 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
242493 9.3 危険 Nullsoft - AOL Nullsoft WinAmp におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5567 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242494 5 警告 MAXDev - MAXdev MD-Pro における CRLF インジェクションの脆弱性 - CVE-2006-5565 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242495 4.3 警告 MAXDev - MAXdev MD-Pro の user.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5564 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242496 7.5 危険 open source technology group - SourceForge の include/database.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5562 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242497 10 危険 ヒューレット・パッカード - HP-UX の swask コマンドにおけるフォーマットストリングの脆弱性 - CVE-2006-5558 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242498 4.6 警告 ヒューレット・パッカード - HP-UX の swpackage コマンドにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5557 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242499 4.6 警告 ヒューレット・パッカード - HP-UX の libc の localtime_r 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-5556 2012-09-25 15:36 2006-10-27 Show GitHub Exploit DB Packet Storm
242500 7.5 危険 otscms - OTSCMS の OTSCMS/OTSCMS.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5548 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with pac… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-47174 2026-06-12 06:16 2026-06-12 Show GitHub Exploit DB Packet Storm
322 8.8 HIGH
Network
- - mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables (ALLOW_ONLY_READONLY_TOOL… New CWE-863
 Incorrect Authorization
CVE-2026-46519 2026-06-12 06:01 2026-06-12 Show GitHub Exploit DB Packet Storm
323 6.1 MEDIUM
Network
- - mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectl_generic tool in mcp-server-kubernetes passes user-supplied flags direct… New CWE-88
Argument Injection
CVE-2026-47250 2026-06-12 06:01 2026-06-12 Show GitHub Exploit DB Packet Storm
324 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.1, any guild member who can invoke slash commands can use /automod add, /automod remove… New CWE-862
 Missing Authorization
CVE-2026-47163 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
325 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a user with Manage Server / ManageGuild, but without Manage Roles or Administrator, … New CWE-266
 Incorrect Privilege Assignment
CVE-2026-47169 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
326 7.7 HIGH
Network
- - Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server to issue arbitrary H… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-47170 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
327 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a reminder whose message contains @everyone or @here. When … New CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-47171 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
328 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged bui… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-47172 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
329 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies w… New CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-47175 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm
330 - - - Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can enable logging and choose a logging channe… New CWE-200
Information Exposure
CVE-2026-47176 2026-06-12 05:58 2026-06-12 Show GitHub Exploit DB Packet Storm