Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-12018 2026-06-26 11:48 2026-06-11 Show GitHub Exploit DB Packet Storm
252 5.5 警告
Local 		東芝 Generic IO & Memory Access ドライバー 東芝製およびDynabook製PC搭載Generic IO & Memory Access ドライバーのIOCTLインタフェースに対するアクセス制御が不十分 New CWE-782
不十分なアクセス制御による IOCTL の公開 		CVE-2026-56129 2026-06-26 09:44 2026-06-25 Show GitHub Exploit DB Packet Storm
253 6.7 警告
Local 		ソニー株式会社 Optical Disc Archive Software Optical Disc Archive Software（Windows版）のインストーラにおけるインストール時の不適切なファイルアクセス権設定の脆弱性 Update CWE-Other
その他 		CVE-2026-50255 2026-06-25 16:27 2026-06-16 Show GitHub Exploit DB Packet Storm
254 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年06月23日） New - - 2026-06-25 10:59 2026-06-24 Show GitHub Exploit DB Packet Storm
255 - - 日立 Hitachi Ops Center Analyzer viewpoint
Hitachi Infrastructure Analytics Advisor
Hitachi Ops Center Viewpoint
Hitachi Ops Center&nbs… 		Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Analyzer viewpointおよびHitachi Ops Center Viewpointにおける複数の脆弱性 New - CVE-2023-35116
CVE-2025-24970
CVE-2025-25193
CVE-2025-48924
CVE-2025-55163
CVE-2025-58056
CVE-2025-58057 		2026-06-25 09:25 2026-06-23 Show GitHub Exploit DB Packet Storm
256 - - 横河電機株式会社 統合情報サーバ（CIサーバ）
FAST/TOOLS 		横河電機製FAST/TOOLSおよびCI Serverにおける重要情報の平文送信の脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-11833 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
257 - - （複数のベンダ） （複数の製品） Microsoft Windows Recovery EnvironmentにおけるUEFI/BIOSパスワード制限回避の脆弱性 - - 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
258 - - （複数のベンダ） （複数の製品） FastStone Image Viewerにおけるファイル解析に関する複数の脆弱性 - - 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
259 9.8 緊急
Network 		InHand Networks IR915L-FQ39-S Firmware
IR912L-FQ58 Firmware 		InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-38714 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
260 9.8 緊急
Network 		InHand Networks IR915L-FQ39-S Firmware
IR912L-FQ58 Firmware 		InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-38715 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343571 - punbb punbb Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags. NVD-CWE-Other
CVE-2005-4665 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343572 - info-zip unzip Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program,… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-4667 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343573 - adobe captivate
contribute
director
dreamweaver
elicensing
fireworks
flash_player
freehand
studio 		Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, inclu… NVD-CWE-Other
CVE-2005-4708 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343574 - martin_bauer gbook Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field. NVD-CWE-Other
CVE-2005-4727 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343575 - sap sap_r_3 SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process ex… NVD-CWE-Other
CVE-2005-4815 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343576 - cisco ios Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a cr… NVD-CWE-Other
CVE-2005-4826 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343577 - viewcvs viewcvs CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type pa… NVD-CWE-Other
CVE-2005-4830 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343578 - viewcvs viewcvs viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other att… NVD-CWE-Other
CVE-2005-4831 2018-10-20 00:41 2005-12-31 Show GitHub Exploit DB Packet Storm
343579 - gallery_project gallery The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. NVD-CWE-Other
CVE-2005-4021 2018-10-20 00:40 2005-12-5 Show GitHub Exploit DB Packet Storm
343580 - - - Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. NVD-CWE-Other
CVE-2005-4022 2018-10-20 00:40 2005-12-5 Show GitHub Exploit DB Packet Storm