Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4751 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7359 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
4752 3.1 低
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-7360 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
4753 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7361 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
4754 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7363 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
4755 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-59031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4756 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-0394 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4757 8.2 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-24031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4758 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-27855 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4759 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における認証に関する脆弱性 CWE-287
CWE-Other
CVE-2026-27856 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4760 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-27860 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346991 - php_labware labwiki Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter. NVD-CWE-Other
CVE-2006-2850 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346992 - dotproject dotproject Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly… NVD-CWE-Other
CVE-2006-2851 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346993 - abarcar abarcar_realty_portal SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NVD-CWE-Other
CVE-2006-2853 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346994 - ibwd ibwd_guestbook SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter. NVD-CWE-Other
CVE-2006-2854 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346995 - xuebook xuebook SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter. NVD-CWE-Other
CVE-2006-2855 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346996 - activestate activeperl ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious s… NVD-CWE-Other
CVE-2006-2856 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346997 - particle_soft particle_wiki SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter. NVD-CWE-Other
CVE-2006-2861 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346998 - alwil avast_antivirus Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors. NVD-CWE-Other
CVE-2006-2869 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
346999 - intelligent_solutions asp_discussion_forum Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable. NVD-CWE-Other
CVE-2006-2870 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
347000 - enigma_haber enigma_haber Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information… NVD-CWE-Other
CVE-2006-2873 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm