Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3731 9.9 緊急
Network 		オラクル REST Data Services オラクルのREST Data Servicesにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46839 2026-06-8 11:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3732 10 緊急
Network 		オラクル REST Data Services オラクルのREST Data Servicesにおける複数の脆弱性 CWE-284
CWE-287
CWE-306
CVE-2026-46840 2026-06-8 11:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3733 5.3 警告
Network 		オラクル REST Data Services オラクルのREST Data Servicesにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-46841 2026-06-8 11:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3734 8.5 重要
Network 		Authentik Security Inc authentik Authentik Security Incのauthentikにおける複数の脆弱性 CWE-20
CWE-347
CVE-2026-47201 2026-06-8 11:45 2026-06-2 Show GitHub Exploit DB Packet Storm
3735 9.8 緊急
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける大文字と小文字の区別の不適切な処理に関する脆弱性 CWE-178
大文字と小文字の区別の不適切な処理 		CVE-2026-47323 2026-06-8 11:45 2026-05-19 Show GitHub Exploit DB Packet Storm
3736 8.1 重要
Network 		OpenStack OpenStack Ironic OpenStackのOpenStack Ironicにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-48681 2026-06-8 11:45 2026-06-4 Show GitHub Exploit DB Packet Storm
3737 7.8 重要
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-49014 2026-06-8 11:45 2026-05-27 Show GitHub Exploit DB Packet Storm
3738 8.8 重要
Network 		Authentik Security Inc authentik Authentik Security Incのauthentikにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49443 2026-06-8 11:45 2026-06-2 Show GitHub Exploit DB Packet Storm
3739 9.8 緊急
Network 		Authentik Security Inc authentik Authentik Security Incのauthentikにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49448 2026-06-8 11:45 2026-06-2 Show GitHub Exploit DB Packet Storm
3740 5.9 警告
Local 		libexpat project libexpat libexpat projectのlibexpatにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-50219 2026-06-8 11:45 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345401 - pcpin pcpin_chat Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as… NVD-CWE-Other
CVE-2006-1963 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345402 - aspsitem aspsitem SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-1964 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345403 - fortinet fortinet28 An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMTP port (TCP port 25), as demonstrated by a 10-microsecond w… NVD-CWE-Other
CVE-2006-1966 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345404 - krankikom contentboxx Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter. NVD-CWE-Other
CVE-2006-1971 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345405 - wingnut easygallery Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter. NVD-CWE-Other
CVE-2006-1972 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345406 - flexbb flexbb Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters. NVD-CWE-Other
CVE-2006-1977 2018-10-19 01:37 2006-04-22 Show GitHub Exploit DB Packet Storm
345407 - flexbb flexbb SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter. CWE-89
SQL Injection 		CVE-2006-1978 2018-10-19 01:37 2006-04-22 Show GitHub Exploit DB Packet Storm
345408 - manic_web mwguest Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. NVD-CWE-Other
CVE-2006-1979 2018-10-19 01:37 2006-04-22 Show GitHub Exploit DB Packet Storm
345409 - php php Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to … NVD-CWE-Other
CVE-2006-1990 2018-10-19 01:37 2006-04-25 Show GitHub Exploit DB Packet Storm
345410 - mozilla firefox Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by th… CWE-399
 Resource Management Errors 		CVE-2006-1993 2018-10-19 01:37 2006-04-25 Show GitHub Exploit DB Packet Storm