Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3951	6.5	警告 Network	workdo	HRM SaaS	WorkDoのHRM SaaSにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-63294	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3952	7.5	重要 Network	kiloview	E3 Firmware	Kiloview Electronics Co., Ltd.のE3 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-63560	2026-02-6 10:40	2025-11-6	Show	GitHub Exploit DB Packet Storm

3953	6.5	警告 Network	GuoMinJim	PersonManage	GuoMinJimのPersonManageにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-63686	2026-02-6 10:40	2025-11-7	Show	GitHub Exploit DB Packet Storm

3954	5.4	警告 Network	Magento, Inc.	E-Commerce	Bhabishya-123のE-commerceにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63883	2026-02-6 10:40	2025-11-18	Show	GitHub Exploit DB Packet Storm

3955	5.3	警告 Network	Salesforce.com, inc.	MuleSoft Anypoint Extension Pack	Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64318	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3956	5.3	警告 Network	Salesforce.com, inc.	MuleSoft Anypoint Extension Pack	Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-64319	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3957	6.5	警告 Network	Salesforce.com, inc.	Agentforce Vibes	Salesforce.com, inc.のAgentforce Vibesにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64320	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3958	5.3	警告 Network	Salesforce.com, inc.	Agentforce Vibes	Salesforce.com, inc.のAgentforce Vibesにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64321	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3959	5.3	警告 Network	Salesforce.com, inc.	Agentforce Vibes	Salesforce.com, inc.のAgentforce Vibesにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-64322	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

3960	5.6	警告 Local	Synology Inc.	BeeDrive	Synology Inc.のBeeDriveにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2025-8074	2026-02-6 10:40	2025-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348191	-	gallery_project	gallery	Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bu…	NVD-CWE-Other	CVE-2006-4030	2011-03-8 11:40	2006-08-17	Show	GitHub Exploit DB Packet Storm

348192	-	gallery_project	gallery	Update to version 1.5-pl1.	NVD-CWE-Other	CVE-2006-4030	2011-03-8 11:40	2006-08-17	Show	GitHub Exploit DB Packet Storm

348193	-	fenestrae	faxination_server	Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet.	NVD-CWE-Other	CVE-2006-4037	2011-03-8 11:40	2006-08-10	Show	GitHub Exploit DB Packet Storm

348194	-	ehmig	me_download_system	Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) Vb8878b936c2bd8ae0cab parameter to (a) inc/sett_…	NVD-CWE-Other	CVE-2006-4054	2011-03-8 11:40	2006-08-10	Show	GitHub Exploit DB Packet Storm

348195	-	wim_fleischhauer	docpile_we	Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parame…	NVD-CWE-Other	CVE-2006-4076	2011-03-8 11:40	2006-08-11	Show	GitHub Exploit DB Packet Storm

348196	-	wim_fleischhauer	docpile_we	Successful exploitation requires that "register_globals" is enabled.	NVD-CWE-Other	CVE-2006-4076	2011-03-8 11:40	2006-08-11	Show	GitHub Exploit DB Packet Storm

348197	-	ozjournals	ozjournals	Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.…	NVD-CWE-Other	CVE-2006-4086	2011-03-8 11:40	2006-08-11	Show	GitHub Exploit DB Packet Storm

348198	-	ibm	websphere_application_server	Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadId…	CWE-200 CWE-264 Information Exposure Permissions, Privileges, and Access Controls	CVE-2006-4136	2011-03-8 11:40	2006-08-15	Show	GitHub Exploit DB Packet Storm

348199	-	ibm	websphere_application_server	IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command l…	NVD-CWE-Other	CVE-2006-4137	2011-03-8 11:40	2006-08-15	Show	GitHub Exploit DB Packet Storm

348200	-	invision_power_services	invision_power_board	Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic."	NVD-CWE-Other	CVE-2006-4155	2011-03-8 11:40	2006-08-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed