Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2911 9.1 緊急
Network
MIYAGAWA (Tatsuhiko Miyagawa) Plack::Middleware::Xsendfile MIYAGAWA (Tatsuhiko Miyagawa)のPlack::Middleware::Xsendfileにおける複数の脆弱性 CWE-200
CWE-441
CWE-913
CVE-2026-7381 2026-05-8 12:09 2026-04-29 Show GitHub Exploit DB Packet Storm
2912 8.1 重要
Network
D-Link Systems, Inc. M60 Firmware D-Link CorporationのM60 Firmwareにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-7554 2026-05-8 12:09 2026-05-1 Show GitHub Exploit DB Packet Storm
2913 9.8 緊急
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7690 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
2914 6.3 警告
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7691 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
2915 6.3 警告
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7692 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
2916 8 重要
Adjacent
TP-LINK Technologies Archer AXE75 Firmware TP-LINK TechnologiesのArcher AXE75 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-15568 2026-05-8 12:09 2026-03-9 Show GitHub Exploit DB Packet Storm
2917 6.5 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2025-31982 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
2918 4.6 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック
CVE-2025-31983 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
2919 6.1 警告
Network
phppointofsale php point of sale phppointofsaleのphp point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-41011 2026-05-8 12:09 2026-04-21 Show GitHub Exploit DB Packet Storm
2920 4.3 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2025-59809 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345731 - gnu lsh unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the s… CWE-200
Information Exposure
CVE-2006-0353 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345732 - mpm hp-180w_voip_wifi_phone MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocument… NVD-CWE-Other
CVE-2006-0360 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345733 - mybulletinboard mybulletinboard Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of a… CWE-79
Cross-site Scripting
CVE-2006-0364 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345734 - cisco call_manager Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative … NVD-CWE-noinfo
CVE-2006-0367 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345735 - cisco call_manager Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a la… NVD-CWE-Other
CVE-2006-0368 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345736 - advantage_century_telecommunication p202s Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive informat… CWE-287
Improper Authentication
CVE-2006-0374 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345737 - advantage_century_telecommunication p202s Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers t… NVD-CWE-Other
CVE-2006-0375 2017-07-20 10:29 2006-01-23 Show GitHub Exploit DB Packet Storm
345738 - netrix x-site_manager Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom … NVD-CWE-Other
CVE-2006-0378 2017-07-20 10:29 2006-01-24 Show GitHub Exploit DB Packet Storm
345739 - freebsd freebsd FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory. NVD-CWE-Other
CVE-2006-0379 2017-07-20 10:29 2006-01-26 Show GitHub Exploit DB Packet Storm
345740 - freebsd freebsd A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local us… NVD-CWE-Other
CVE-2006-0380 2017-07-20 10:29 2006-01-26 Show GitHub Exploit DB Packet Storm