Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4421 9.1 緊急
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-25199 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
4422 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-138
特殊要素の不適切な無害化 		CVE-2026-26129 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
4423 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-74
インジェクション 		CVE-2026-26164 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
4424 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-26956 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
4425 6.5 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-27644 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
4426 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-27693 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
4427 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-27694 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
4428 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31753 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
4429 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31754 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
4430 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31755 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345771 - cmsdevelopment business_card_web_builder PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbit… NVD-CWE-Other
CVE-2006-4946 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345772 - cmsdevelopment business_card_web_builder Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4946 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345773 - the_myreview_system myreview SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php. NVD-CWE-Other
CVE-2006-4957 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345774 - blue_dragon php_blue_dragon Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an er… NVD-CWE-Other
CVE-2006-4960 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345775 - blue_dragon php_blue_dragon SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL command… NVD-CWE-Other
CVE-2006-4961 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345776 - blue_dragon php_blue_dragon Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt p… NVD-CWE-Other
CVE-2006-4962 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345777 - exponent exponent_cms Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_v… NVD-CWE-Other
CVE-2006-4963 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
345778 - wahm_e-commerce pie_cart_pro Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) o… NVD-CWE-Other
CVE-2006-4969 2017-10-19 10:29 2006-09-25 Show GitHub Exploit DB Packet Storm
345779 - ipswitch ws_ftp_server Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command. NVD-CWE-Other
CVE-2006-4974 2017-10-19 10:29 2006-09-25 Show GitHub Exploit DB Packet Storm
345780 - bfriendly.com einstein Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges. NVD-CWE-Other
CVE-2005-0619 2017-10-19 10:29 2005-02-28 Show GitHub Exploit DB Packet Storm