Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3121 7.3 重要
Local 		libsixel project libsixel Hayaki Saito (saitoha)のlibsixelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-33021 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
3122 7.8 重要
Local 		libsixel project libsixel Hayaki Saito (saitoha)のlibsixelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-33023 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
3123 7.5 重要
Network 		Julian Gruber brace-expansion Julian Gruber (juliangruber)のbrace-expansionにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-33750 2026-04-24 11:37 2026-03-27 Show GitHub Exploit DB Packet Storm
3124 8.1 重要
Network 		Pavel Shklovsky (pab1it0) Azure Data Explorer MCP Server Pavel Shklovsky (pab1it0)のAzure Data Explorer MCP Serverにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-33980 2026-04-24 11:37 2026-03-27 Show GitHub Exploit DB Packet Storm
3125 6.1 警告
Network 		アドビシステムズ Adobe Connect
Adobe Connect Desktop Application 		アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-34614 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
3126 10 緊急
Network 		アドビシステムズ Adobe Connect
Adobe Connect Desktop Application 		アドビのAdobe Connect等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-34615 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
3127 8.7 重要
Network 		アドビシステムズ Adobe Connect
Adobe Connect Desktop Application 		アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-34617 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
3128 7.5 重要
Network 		Nhost Nhost/auth NhostのNhost/authにおける複数の脆弱性 CWE-200
CWE-598
CVE-2026-34969 2026-04-24 11:37 2026-04-6 Show GitHub Exploit DB Packet Storm
3129 9.8 緊急
Network 		Aperi'Solve Aperi'Solve Aperi'SolveにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34977 2026-04-24 11:37 2026-04-6 Show GitHub Exploit DB Packet Storm
3130 8.8 重要
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35050 2026-04-24 11:37 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347211 - sun grid_engine
n1_grid_engine 		Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before 20060327 allows local users to gain root privileges. NVD-CWE-Other
CVE-2006-1506 2011-03-8 11:33 2006-03-30 Show GitHub Exploit DB Packet Storm
347212 - sun grid_engine
n1_grid_engine 		This vulnerability affects Sun Microsystems, Sun Grid Engine 5.3 before 20060327 & N1 Grid Engine 6.0 before 20060327. NVD-CWE-Other
CVE-2006-1506 2011-03-8 11:33 2006-03-30 Show GitHub Exploit DB Packet Storm
347213 - abcmidi abcmidi Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute arbitrary code via crafted ABC music files that trigger the overflo… NVD-CWE-Other
CVE-2006-1514 2011-03-8 11:33 2006-04-27 Show GitHub Exploit DB Packet Storm
347214 - typespeed typespeed Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-Other
CVE-2006-1515 2011-03-8 11:33 2006-06-1 Show GitHub Exploit DB Packet Storm
347215 - php php_script_index Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter. NVD-CWE-Other
CVE-2006-1558 2011-03-8 11:33 2006-03-31 Show GitHub Exploit DB Packet Storm
347216 - php php_script_index SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details ar… NVD-CWE-Other
CVE-2006-1559 2011-03-8 11:33 2006-03-31 Show GitHub Exploit DB Packet Storm
347217 - exponent exponent_cms Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." NVD-CWE-Other
CVE-2006-1604 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
347218 - exponent exponent_cms Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." NVD-CWE-Other
CVE-2006-1605 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
347219 - exponent exponent_cms Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. NVD-CWE-Other
CVE-2006-1606 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
347220 - apt apt-webshop-system Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably inv… NVD-CWE-Other
CVE-2006-1687 2011-03-8 11:33 2006-04-11 Show GitHub Exploit DB Packet Storm