Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247051 6.5 警告 club-nuke - Club-Nuke [XP] における SQL インジェクションの脆弱性 - CVE-2006-4072 2012-06-26 15:37 2006-08-10 Show GitHub Exploit DB Packet Storm
247052 6.8 警告 Cake Software Foundation - CakePHP の cake/libs/error.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4067 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247053 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4065 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247054 7.5 危険 csaba godor - Csaba Godor SAPID Blog Beta における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4063 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247055 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Shop の usr/extensions/get_tree.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4062 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247056 7.5 危険 ehmig - ME Download System における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4054 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247057 5.1 警告 ehmig - ME Download System の templates/header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4053 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247058 7.5 危険 david walker - phpAMA の auto_check_renewals.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4050 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247059 7.5 危険 brad fears - Brad Fears phpCodeCabine の Beautifier/Core.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4044 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
247060 7.5 危険 chaossoft - GaesteChaos の eintragen.php における SQL インジェクションの脆弱性 - CVE-2006-4039 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized … New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62310 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
142 4.3 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62311 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
143 3.0 LOW
Adjacent
- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… New CWE-522
 Insufficiently Protected Credentials
CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
144 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
145 2.3 LOW
Adjacent
- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
146 2.6 LOW
Adjacent
- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… New CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
147 7.5 HIGH
Network
libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. Update CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
148 5.4 MEDIUM
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … New CWE-779
 Logging of Excessive Data
CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
149 8.6 HIGH
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.… New CWE-20
 Improper Input Validation 
CVE-2026-20224 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
150 5.4 MEDIUM
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform … New CWE-779
 Logging of Excessive Data
CVE-2026-20210 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm