Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3791 6.6 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-35365 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3792 4.4 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-35366 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3793 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-35369 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3794 4.4 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-35370 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3795 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-35371 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3796 5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-35372 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3797 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35373 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3798 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35374 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3799 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35375 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3800 5.8 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35376 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345891 - smartwin_technology cyberoffice_warehouse_builder Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex paramete… CWE-79
Cross-site Scripting 		CVE-2006-2178 2017-07-20 10:31 2006-05-4 Show GitHub Exploit DB Packet Storm
345892 - smartwin_technology cyberoffice_warehouse_builder Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm. NVD-CWE-Other
CVE-2006-2179 2017-07-20 10:31 2006-05-4 Show GitHub Exploit DB Packet Storm
345893 - kmint21_software golden_ftp_server Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE comma… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-2180 2017-07-20 10:31 2006-05-4 Show GitHub Exploit DB Packet Storm
345894 - albinator albinator Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) prelo… CWE-79
Cross-site Scripting 		CVE-2006-2181 2017-07-20 10:31 2006-05-4 Show GitHub Exploit DB Packet Storm
345895 - truecrypt_foundation truecrypt Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable th… NVD-CWE-Other
CVE-2006-2183 2017-07-20 10:31 2006-05-4 Show GitHub Exploit DB Packet Storm
345896 - novell netware PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to… NVD-CWE-Other
CVE-2006-2185 2017-07-20 10:31 2006-05-23 Show GitHub Exploit DB Packet Storm
345897 - horde horde Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php. NVD-CWE-Other
CVE-2006-2195 2017-07-20 10:31 2006-06-15 Show GitHub Exploit DB Packet Storm
345898 - horde horde This vulnerability is addressed in the following product release: Horde, Horde, 3.1.1 NVD-CWE-Other
CVE-2006-2195 2017-07-20 10:31 2006-06-15 Show GitHub Exploit DB Packet Storm
345899 - jochen_friedrich pinball Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at… NVD-CWE-Other
CVE-2006-2196 2017-07-20 10:31 2006-06-26 Show GitHub Exploit DB Packet Storm
345900 - kerio kerio_mailserver Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter." NVD-CWE-Other
CVE-2006-2203 2017-07-20 10:31 2006-05-5 Show GitHub Exploit DB Packet Storm