Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2771	6.5	警告 Network	マイクロソフト	Microsoft Teams	Microsoft Team Events Portal Information Disclosure Vulnerability	CWE-285 不適切な認可	CVE-2026-33823	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

2772	9	緊急 Network	マイクロソフト	Azure Managed Instance for Apache Cassandra	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	CWE-20 不適切な入力確認	CVE-2026-33844	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

2773	8.2	重要 Network	マイクロソフト	Microsoft Partner Center	Microsoft Partner Center Spoofing Vulnerability	CWE-610 別領域リソースに対する外部からの制御可能な参照	CVE-2026-34327	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

2774	5.3	警告 Network	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける弱いハッシュの使用に関する脆弱性	CWE-328 脆弱なハッシュの使用	CVE-2026-34527	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

2775	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35072	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

2776	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35073	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

2777	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

2778	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

2779	8.8	重要 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35397	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

2780	9.6	緊急 Network	マイクロソフト	Azure Cloud Shell	Azure Cloud Shell Spoofing Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-35428	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355051	-	runcms	runcms	Succesful exploitation requires that register_globals = On & allow_url_fopen = On	NVD-CWE-Other	CVE-2006-1793	2008-09-6 06:02	2006-04-17	Show	GitHub Exploit DB Packet Storm

355052	-	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inj…	NVD-CWE-Other	CVE-2006-1796	2008-09-6 06:02	2006-04-18	Show	GitHub Exploit DB Packet Storm

355053	-	wordpress	wordpress	The vulnerability manifests itself only when viewed by IE. This vulnerability is addressed in the following product release: Wordpress 2.0.1-1	NVD-CWE-Other	CVE-2006-1796	2008-09-6 06:02	2006-04-18	Show	GitHub Exploit DB Packet Storm

355054	-	datenbank_module woltlab	datenbank_module burning_board	SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) dat…	NVD-CWE-Other	CVE-2006-1094	2008-09-6 06:01	2006-03-9	Show	GitHub Exploit DB Packet Storm

355055	-	logit	logit	PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; t…	NVD-CWE-Other	CVE-2006-1099	2008-09-6 06:01	2006-03-9	Show	GitHub Exploit DB Packet Storm

355056	-	nodez	nodez	Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password has…	NVD-CWE-Other	CVE-2006-1164	2008-09-6 06:01	2006-03-13	Show	GitHub Exploit DB Packet Storm

355057	-	runcms	runcms	Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.	NVD-CWE-Other	CVE-2006-1216	2008-09-6 06:01	2006-03-14	Show	GitHub Exploit DB Packet Storm

355058	-	wordpress	wordpress	Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.	NVD-CWE-Other	CVE-2006-1263	2008-09-6 06:01	2006-03-19	Show	GitHub Exploit DB Packet Storm

355059	-	university_of_washington	pubcookie	Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 be…	NVD-CWE-Other	CVE-2006-1394	2008-09-6 06:01	2006-03-27	Show	GitHub Exploit DB Packet Storm

355060	-	upoint	at1_event_publisher	Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Websit…	NVD-CWE-Other	CVE-2006-1436	2008-09-6 06:01	2006-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed