Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-7881	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

252	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-7882	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

253	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-7886	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

254	6.4	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性	CWE-1287 指定されたタイプの入力に対する不適切な検証	CVE-2026-7887	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

255	6.4	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-7890	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

256	7.2	重要 Network	Concrete CMS	Concrete CMS	Concrete CMSにおける複数の脆弱性	CWE-23 CWE-434 CWE-98	CVE-2026-8134	2026-05-28 14:37	2026-05-21	Show	GitHub Exploit DB Packet Storm

257	7.2	重要 Network	Concrete CMS	Concrete CMS	Concrete CMSにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-8135	2026-05-28 14:37	2026-05-21	Show	GitHub Exploit DB Packet Storm

258	5.4	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8139	2026-05-28 14:37	2026-05-21	Show	GitHub Exploit DB Packet Storm

259	6.5	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-8140	2026-05-28 14:37	2026-05-21	Show	GitHub Exploit DB Packet Storm

260	4.8	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8197	2026-05-28 14:37	2026-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345371	-	usermin	usermin	This vulnerability is addressed in the following product release: Webmin, Usermin, 1.220	NVD-CWE-Other	CVE-2006-4246	2017-07-20 10:32	2006-09-20	Show	GitHub Exploit DB Packet Storm

345372	-	ibm	aix	Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.	NVD-CWE-Other	CVE-2006-4254	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345373	-	ibm	aix	IBM has released an advisory and interim fixes to address this issue.	NVD-CWE-Other	CVE-2006-4254	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345374	-	john_hanna	anti-spam_smtp_proxy_server	Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbitrary files via (1) C:\ (Windows drive letter), (2) UNC, an…	NVD-CWE-Other	CVE-2006-4258	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345375	-	jake_olefsky	fotopholder	Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a d…	NVD-CWE-Other	CVE-2006-4259	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345376	-	jake_olefsky	fotopholder	Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. (dot dot) in the path parameter.	NVD-CWE-Other	CVE-2006-4260	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345377	-	tutti_nova	tutti_nova	Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to (1) include/novalib/class…	NVD-CWE-Other	CVE-2006-4277	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345378	-	arthur_konze_webdesign	akocomment	PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_abs…	NVD-CWE-Other	CVE-2006-4281	2017-07-20 10:32	2006-08-22	Show	GitHub Exploit DB Packet Storm

345379	-	sony	vaio_media_server	Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-Other	CVE-2006-4289	2017-07-20 10:32	2006-08-23	Show	GitHub Exploit DB Packet Storm

345380	-	sony	vaio_media_server	Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors.	NVD-CWE-Other	CVE-2006-4290	2017-07-20 10:32	2006-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed