Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4291 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43380 2026-05-21 10:51 2026-05-8 Show GitHub Exploit DB Packet Storm
4292 5.3 警告
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-44288 2026-05-21 10:51 2026-05-13 Show GitHub Exploit DB Packet Storm
4293 8.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44549 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4294 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44565 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4295 9.8 緊急
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-22
CWE-434
CVE-2026-44566 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4296 7.3 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-602
CWE-863
CVE-2026-44567 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4297 7.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44569 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4298 9.9 緊急
Network 		traefik traefik traefikにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-44774 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
4299 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-45187 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
4300 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-45396 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344741 - 321soft php-gallery Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter. NVD-CWE-Other
CVE-2006-2211 2018-10-19 01:38 2006-05-5 Show GitHub Exploit DB Packet Storm
344742 - karjasoft sami_ftp_server Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS command. NVD-CWE-Other
CVE-2006-2212 2018-10-19 01:38 2006-05-5 Show GitHub Exploit DB Packet Storm
344743 - devsyn open_bulletin_board Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) misc.php and (2) member.php. NVD-CWE-Other
CVE-2006-2216 2018-10-19 01:38 2006-05-5 Show GitHub Exploit DB Packet Storm
344744 - bitrock
process-one 		install_builder
ejabberd 		A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cau… NVD-CWE-Other
CVE-2006-2221 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344745 - bitrock
process-one 		install_builder
ejabberd 		This vulnerability is addressed in the following product releases: Process-one, ejabberd, 1.1.1_2 BitRock, Install Builder, 3.7.0 NVD-CWE-Other
CVE-2006-2221 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344746 - norz zawhttpd Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) cha… NVD-CWE-Other
CVE-2006-2222 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344747 - quagga quagga RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain … CWE-20
 Improper Input Validation  		CVE-2006-2223 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344748 - quagga quagga_routing_software_suite RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets. CWE-287
Improper Authentication 		CVE-2006-2224 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344749 - dxmsoft xm_easy_personal_ftp_server Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username. NVD-CWE-Other
CVE-2006-2225 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm
344750 - punbb punbb Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the req_message parameter, because the value of the redirect_ur… NVD-CWE-Other
CVE-2006-2227 2018-10-19 01:38 2006-05-6 Show GitHub Exploit DB Packet Storm