Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5221 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-41681 2026-04-30 12:17 2026-04-24 Show GitHub Exploit DB Packet Storm
5222 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-126
CWE-130
CVE-2026-41898 2026-04-30 12:17 2026-04-24 Show GitHub Exploit DB Packet Storm
5223 7 重要
Local 		レッドハット
libssh		 libssh
Red Hat Hardened Images 		libssh等の複数ベンダの製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-14821 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5224 10 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-29
パストラバーサル (/../filename) 		CVE-2025-15036 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
5225 9.8 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-15379 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
5226 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-15381 2026-04-30 12:17 2026-03-27 Show GitHub Exploit DB Packet Storm
5227 7.5 重要
Network 		Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおけるメモリ管理ルーチンの不一致に関する脆弱性 CWE-762
メモリ管理ルーチンの不一致 		CVE-2025-48431 2026-04-30 12:17 2026-04-28 Show GitHub Exploit DB Packet Storm
5228 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2025-59969 2026-04-30 12:17 2026-04-9 Show GitHub Exploit DB Packet Storm
5229 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1839 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5230 6.1 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20059 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347511 - bea weblogic_server The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive… NVD-CWE-Other
CVE-2006-2468 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347512 - bea weblogic_server The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application… NVD-CWE-Other
CVE-2006-2469 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347513 - bea weblogic_server Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attack… NVD-CWE-Other
CVE-2006-2470 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347514 - bea weblogic_server Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to … NVD-CWE-Other
CVE-2006-2471 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347515 - bea weblogic_server This vulnerability is addressed in the following product releases: BEA Systems, Weblogic Server, 8.1 SP 5 BEA Systems, Weblogic Express, 8.1 SP 5 BEA Systems, Weblogic Server, 7.0 SP 7 BEA System… NVD-CWE-Other
CVE-2006-2471 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347516 - bea weblogic_server Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys. NVD-CWE-Other
CVE-2006-2472 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347517 - bea weblogic_server Hyperlink #907650 has patches for the following products: WebLogic Server 9.1 WebLogic Server 9.0 This vulnerability is addressed in the following product releases: BEA Systems, Weblogic Server, … NVD-CWE-Other
CVE-2006-2472 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
347518 - microchip_data_systems
pentaware 		ziptv_for_c\+\+_builder
ziptv_for_delphi_7
pentasuite-pro
pentazip 		Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products,… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-2482 2017-07-20 10:31 2006-09-9 Show GitHub Exploit DB Packet Storm
347519 - spymac spymac_web_os Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters … NVD-CWE-Other
CVE-2006-2488 2017-07-20 10:31 2006-05-20 Show GitHub Exploit DB Packet Storm
347520 - invision_power_services invision_power_board Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in classes/post/class_post.php and (2) the df v… NVD-CWE-Other
CVE-2006-2498 2017-07-20 10:31 2006-05-20 Show GitHub Exploit DB Packet Storm