Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4831 4.3 警告
Network 		wolfssh wolfssh wolfsshにおける複数の脆弱性 CWE-125
CWE-126
CVE-2026-0930 2026-04-27 11:28 2026-04-20 Show GitHub Exploit DB Packet Storm
4832 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows COM サーバーの情報漏えいの脆弱性 CWE-843
型の取り違え 		CVE-2026-20806 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
4833 4.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 回復環境のセキュリティ機能バイパスの脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2026-20928 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
4834 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 10 1809
Microsoft Windows 10 22h2
Microsoft Wind… 		Windows Management サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-20930 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
4835 6 警告
Local 		オラクル JDK
JRE
Oracle GraalVM 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22003 2026-04-27 11:28 2026-04-21 Show GitHub Exploit DB Packet Storm
4836 3.7 低
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-22746 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
4837 8.1 重要
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性 CWE-297
ホストの不一致による証明書の不適切な検証 		CVE-2026-22747 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
4838 6.5 警告
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-22748 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
4839 7.5 重要
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-22753 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
4840 7.5 重要
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-22754 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347341 - stefan_ritt elog_web_logbook elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request with the fail parameter set to 1, which redirects to the same request. NVD-CWE-Other
CVE-2006-0600 2017-07-20 10:29 2006-02-13 Show GitHub Exploit DB Packet Storm
347342 - atmail atmail Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique paramete… NVD-CWE-Other
CVE-2006-0611 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347343 - powersave powersave Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspecified vectors. NOTE: the provenance of this information is unknown; portions of… NVD-CWE-Other
CVE-2006-0612 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347344 - sun j2se Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applicat… NVD-CWE-Other
CVE-2006-0613 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347345 - sun jdk
jre 		Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflecti… NVD-CWE-Other
CVE-2006-0616 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347346 - sun jdk
jre 		Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving th… NVD-CWE-Other
CVE-2006-0617 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347347 - qnx neutrino_rtos Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name). NVD-CWE-Other
CVE-2006-0618 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347348 - qnx rtos Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2)… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-0619 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347349 - qnx rtos Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. NVD-CWE-Other
CVE-2006-0620 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm
347350 - qnx rtos Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands. NVD-CWE-Other
CVE-2006-0621 2017-07-20 10:29 2006-02-9 Show GitHub Exploit DB Packet Storm