Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5011 6.1 警告
Network 		WSO2 WSO2 API Manager
WSO2 Identity Server 		WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-6024 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
5012 6.5 警告
Network 		フォーティネット FortiOS
FortiPAM
FortiProxy
FortiSwitch Manager 		フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-61624 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
5013 5.4 警告
Network 		フォーティネット FortiSandbox
FortiSandbox Cloud 		フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-61886 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
5014 5.3 警告
Network 		Apache Software Foundation Apache Doris-MCP-Server Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2025-66335 2026-04-24 11:34 2026-04-20 Show GitHub Exploit DB Packet Storm
5015 6.5 警告
Network 		フォーティネット FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiManager 		フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-68649 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
5016 8.4 重要
Local 		Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF Proにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2025-69627 2026-04-24 11:34 2026-04-13 Show GitHub Exploit DB Packet Storm
5017 4.3 警告
Network 		Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-0971 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5018 5.4 警告
Network 		Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2026-0972 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5019 6.5 警告
Network 		Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2026-1089 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5020 4.9 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-21998 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353501 - fujitsu serverview This vulnerability is addressed in the following product releases: Fujitsu, ServerView, 3.60L99 Fujitsu, ServerView, 4.20L11B CWE-79
Cross-site Scripting 		CVE-2006-3579 2008-09-6 06:07 2006-07-13 Show GitHub Exploit DB Packet Storm
353502 - ubuntu ubuntu_linux passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and … NVD-CWE-Other
CVE-2006-3597 2008-09-6 06:07 2006-07-19 Show GitHub Exploit DB Packet Storm
353503 - cutephp cutenews Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information i… NVD-CWE-Other
CVE-2006-3661 2008-09-6 06:07 2006-07-19 Show GitHub Exploit DB Packet Storm
353504 - kde kdebase The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times. NVD-CWE-Other
CVE-2006-3742 2008-09-6 06:07 2006-09-7 Show GitHub Exploit DB Packet Storm
353505 - lucid_designs lucid_calendar Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance … NVD-CWE-Other
CVE-2006-3025 2008-09-6 06:06 2006-06-15 Show GitHub Exploit DB Packet Storm
353506 - lucid_designs lucid_calendar Lucid Designs, Lucid Calendar, 0.22 is unsupported. A new, supported version of this product will be released in the near future. NVD-CWE-Other
CVE-2006-3025 2008-09-6 06:06 2006-06-15 Show GitHub Exploit DB Packet Storm
353507 - emailarchitect email_server Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover a… NVD-CWE-Other
CVE-2006-3108 2008-09-6 06:06 2006-06-21 Show GitHub Exploit DB Packet Storm
353508 - canonical spread spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bin… NVD-CWE-Other
CVE-2006-3118 2008-09-6 06:06 2006-07-1 Show GitHub Exploit DB Packet Storm
353509 - mambo mambo SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. NVD-CWE-Other
CVE-2006-3263 2008-09-6 06:06 2006-06-28 Show GitHub Exploit DB Packet Storm
353510 - mpg123 mpg123 Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strnc… NVD-CWE-Other
CVE-2006-3355 2008-09-6 06:06 2006-07-7 Show GitHub Exploit DB Packet Storm