Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4871 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-0186 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4872 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-3922 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4873 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-6016 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4874 7.5 重要
Network 		Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF ProにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-66769 2026-04-27 11:26 2026-04-13 Show GitHub Exploit DB Packet Storm
4875 7.5 重要
Network 		Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF ProにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-69624 2026-04-27 11:26 2026-04-13 Show GitHub Exploit DB Packet Storm
4876 2.7 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-9957 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4877 4.8 警告
Network 		pega pega platform pegaのpega platformにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-1564 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
4878 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-1660 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4879 4.8 警告
Network 		pega pega platform pegaのpega platformにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-1711 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
4880 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2026-23314 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347251 - clam_anti-virus clamav Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX f… NVD-CWE-Other
CVE-2006-0162 2017-07-20 10:29 2006-01-11 Show GitHub Exploit DB Packet Storm
347252 - francisco_burzi php-nuke_ev SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by t… NVD-CWE-Other
CVE-2006-0163 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347253 - woah-projekt phgstats phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable. NVD-CWE-Other
CVE-2006-0164 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347254 - plain_black webgui Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2… NVD-CWE-Other
CVE-2006-0165 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347255 - symantec norton_system_works Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindN… NVD-CWE-Other
CVE-2006-0166 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347256 - cray unicos Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c option of /etc/nu t… NVD-CWE-Other
CVE-2006-0177 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347257 - cray unicos Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and … NVD-CWE-Other
CVE-2006-0178 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347258 - cisco cs-mars Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the … NVD-CWE-Other
CVE-2006-0181 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347259 - mainenet_enterprises asptopsites Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp. NVD-CWE-Other
CVE-2006-0184 2017-07-20 10:29 2006-01-12 Show GitHub Exploit DB Packet Storm
347260 - light_weight_calendar light_weight_calendar Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by in… NVD-CWE-Other
CVE-2006-0206 2017-07-20 10:29 2006-01-14 Show GitHub Exploit DB Packet Storm