Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3391 5.4 警告
Network 		Apache Software Foundation Apache Shiro Apache Software FoundationのApache Shiroにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-48589 2026-06-3 15:39 2026-05-25 Show GitHub Exploit DB Packet Storm
3392 9.8 緊急
Network 		DAEMON Tools DAEMON Tools Disc Soft LtdのDAEMON Toolsにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード 		CVE-2026-8398 2026-06-3 15:38 2026-05-15 Show GitHub Exploit DB Packet Storm
3393 5.4 警告
Network 		Synology Inc. Contacts Synology Inc.のContactsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13167 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
3394 5.5 警告
Local 		Libusb Libusb Libusbにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-23679 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
3395 7.8 重要
Local 		MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-25104 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3396 7.8 重要
Local 		MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-25713 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3397 5.3 警告
Network 		Espen Hovlandsdal (rexxars) eventsource-encoder Espen Hovlandsdal (rexxars)のeventsource-encoderにおける複数の脆弱性 CWE-113
CWE-93
CVE-2026-44214 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
3398 6.1 警告
Network 		Nitro Nitro Nitroにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-44372 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
3399 5.3 警告
Network 		Nitro Nitro Nitroにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44373 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
3400 7.5 重要
Network 		Lookyloo Playwright Capture LookylooのPlaywright Captureにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44439 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344301 - bitweaver bitweaver Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with dou… NVD-CWE-Other
CVE-2006-3102 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
344302 - bitweaver bitweaver Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter … NVD-CWE-Other
CVE-2006-3103 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
344303 - bitweaver bitweaver users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the result… NVD-CWE-Other
CVE-2006-3104 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
344304 - bitweaver bitweaver CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP h… NVD-CWE-Other
CVE-2006-3105 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
344305 - cisco call_manager Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web scr… NVD-CWE-Other
CVE-2006-3109 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
344306 - mozilla firefox
seamonkey
thunderbird 		Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simulta… NVD-CWE-Other
CVE-2006-3113 2018-10-19 01:45 2006-07-28 Show GitHub Exploit DB Packet Storm
344307 - pc_tools pc_tools_antivirus PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands. NVD-CWE-Other
CVE-2006-3114 2018-10-19 01:45 2006-08-9 Show GitHub Exploit DB Packet Storm
344308 - openoffice
sun 		openoffice
staroffice 		Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document t… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-3117 2018-10-19 01:45 2006-07-1 Show GitHub Exploit DB Packet Storm
344309 - alan_ward a-cart A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information. NVD-CWE-Other
CVE-2006-2948 2018-10-19 01:44 2006-06-13 Show GitHub Exploit DB Packet Storm
344310 - mybulletinboard mybulletinboard Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter. NVD-CWE-Other
CVE-2006-2949 2018-10-19 01:44 2006-06-13 Show GitHub Exploit DB Packet Storm