Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3391 5.4 警告
Network
Apache Software Foundation Apache Shiro Apache Software FoundationのApache Shiroにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-48589 2026-06-3 15:39 2026-05-25 Show GitHub Exploit DB Packet Storm
3392 9.8 緊急
Network
DAEMON Tools DAEMON Tools Disc Soft LtdのDAEMON Toolsにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード
CVE-2026-8398 2026-06-3 15:38 2026-05-15 Show GitHub Exploit DB Packet Storm
3393 5.4 警告
Network
Synology Inc. Contacts Synology Inc.のContactsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-13167 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
3394 5.5 警告
Local
Libusb Libusb Libusbにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-23679 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
3395 7.8 重要
Local
MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-25104 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3396 7.8 重要
Local
MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-25713 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3397 5.3 警告
Network
Espen Hovlandsdal (rexxars) eventsource-encoder Espen Hovlandsdal (rexxars)のeventsource-encoderにおける複数の脆弱性 CWE-113
CWE-93
CVE-2026-44214 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3398 6.1 警告
Network
Nitro Nitro Nitroにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-44372 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
3399 5.3 警告
Network
Nitro Nitro Nitroにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-44373 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
3400 7.5 重要
Network
Lookyloo Playwright Capture LookylooのPlaywright Captureにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44439 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344281 - ibm db2_universal_database Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message in… NVD-CWE-Other
CVE-2006-3066 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344282 - ibm db2_universal_database This vulnerability is addressed in the following product release: IBM, DB2 Universal Database, 8.12 NVD-CWE-Other
CVE-2006-3066 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344283 - zeroboard zeroboard write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file … NVD-CWE-Other
CVE-2006-3070 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344284 - anton_belev mp3_search_archive Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the "search b… NVD-CWE-Other
CVE-2006-3071 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344285 - kaspersky kaspersky_anti-virus
kaspersky_internet_security
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3074 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344286 - picturedis picturedis_photoalbum
picturedis_professional
Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP cod… NVD-CWE-Other
CVE-2006-3075 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344287 - phpbluedragon phpbluedragon_cms PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a U… NVD-CWE-Other
CVE-2006-3076 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344288 - apboard apboard Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID parameter in board.php and (2) viewcatmod parameter… NVD-CWE-Other
CVE-2006-3078 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344289 - axent axentforum Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter. NVD-CWE-Other
CVE-2006-3080 2018-10-19 01:45 2006-06-19 Show GitHub Exploit DB Packet Storm
344290 - gnupg gnupg parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large … CWE-189
Numeric Errors
CVE-2006-3082 2018-10-19 01:45 2006-06-20 Show GitHub Exploit DB Packet Storm