Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4081	8.2	重要 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-24031	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

4082	5.9	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるCapture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2026-27855	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

4083	5.9	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における認証に関する脆弱性	CWE-287 CWE-Other	CVE-2026-27856	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

4084	5.3	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるLDAP インジェクションの脆弱性	CWE-90 LDAP インジェクション	CVE-2026-27860	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

4085	8.4	重要 Local	Anthropic PBC	Claude Code Claude Agent SDK	Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35020	2026-05-1 10:39	2026-04-6	Show	GitHub Exploit DB Packet Storm

4086	7.8	重要 Local	Anthropic PBC	Claude Code Claude Agent SDK	Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35021	2026-05-1 10:39	2026-04-6	Show	GitHub Exploit DB Packet Storm

4087	9.8	緊急 Network	Anthropic PBC	Claude Code Claude Agent SDK	Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35022	2026-05-1 10:39	2026-04-6	Show	GitHub Exploit DB Packet Storm

4088	7.8	重要 Local	MAGIX	MAGIX MP3 deluxe	MAGIXのMAGIX MP3 deluxeにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2018-25260	2026-05-1 10:39	2026-04-22	Show	GitHub Exploit DB Packet Storm

4089	7.8	重要 Local	Enter Srl	Iperius Backup	Enter SrlのIperius Backupにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2018-25261	2026-05-1 10:39	2026-04-22	Show	GitHub Exploit DB Packet Storm

4090	10	緊急 Network	マイクロソフト	Microsoft Purview eDiscovery	Microsoft Purview eDiscovery Elevation of Privilege Vulnerability	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-26150	2026-05-1 10:39	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355061	-	webgais_development_team	webgais	websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).	NVD-CWE-Other	CVE-1999-0196	2008-09-9 21:33	1997-07-8	Show	GitHub Exploit DB Packet Storm

355062	-	vtiger	vtiger_crm	Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions …	NVD-CWE-Other	CVE-2006-4617	2008-09-6 06:10	2006-09-7	Show	GitHub Exploit DB Packet Storm

355063	-	sage	sage	Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. S…	NVD-CWE-Other	CVE-2006-4711	2008-09-6 06:10	2006-09-13	Show	GitHub Exploit DB Packet Storm

355064	-	e107	e107	Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, …	NVD-CWE-Other	CVE-2006-4794	2008-09-6 06:10	2006-09-15	Show	GitHub Exploit DB Packet Storm

355065	-	xine	xine-lib	Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005…	NVD-CWE-Other	CVE-2006-4799	2008-09-6 06:10	2006-09-15	Show	GitHub Exploit DB Packet Storm

355066	-	blojsom	blojsom	Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of …	NVD-CWE-Other	CVE-2006-4830	2008-09-6 06:10	2006-09-16	Show	GitHub Exploit DB Packet Storm

355067	-	blojsom	blojsom	This vulnerability is addressed in the following product release: Blojsom, Blojsom, 2.31	NVD-CWE-Other	CVE-2006-4830	2008-09-6 06:10	2006-09-16	Show	GitHub Exploit DB Packet Storm

355068	-	limbo_cms	limbo_cms	Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antiha…	NVD-CWE-Other	CVE-2006-4860	2008-09-6 06:10	2006-09-20	Show	GitHub Exploit DB Packet Storm

355069	-	apple	mac_os_x mac_os_x_server	Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.	NVD-CWE-Other	CVE-2006-4866	2008-09-6 06:10	2006-09-20	Show	GitHub Exploit DB Packet Storm

355070	-	idevspot	isupport	Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the…	NVD-CWE-Other	CVE-2006-4884	2008-09-6 06:10	2006-09-20	Show	GitHub Exploit DB Packet Storm