Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5251 10 緊急
Network
Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション
CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5252 7.7 重要
Network
Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5253 5.5 警告
Local
jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5254 4.2 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-44991 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5255 5 警告
Local
OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-44992 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5256 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-44993 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5257 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-44994 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5258 7.3 重要
Local
OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-44995 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5259 3.7
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-44996 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
5260 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定
CVE-2026-44997 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345781 - irfanview irfanview IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file. NVD-CWE-Other
CVE-2006-4231 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
345782 - powergap powergap_business
powergap_lite
Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and… NVD-CWE-Other
CVE-2006-4236 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345783 - mamboxchange reporter PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_a… NVD-CWE-Other
CVE-2006-4241 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345784 - joomla jim_instant_messaging_component PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_pat… NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345785 - joomla jim_instant_messaging_component Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345786 - horde horde
imp
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related … NVD-CWE-Other
CVE-2006-4255 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345787 - horde application_framework index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "c… NVD-CWE-Other
CVE-2006-4256 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345788 - ibm db2 IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during… CWE-399
 Resource Management Errors
CVE-2006-4257 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345789 - product_scroller_module product_scroller_module Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop (com_phpshop) for Mambo and Joomla! allow remote attackers to execute arbitrary PH… NVD-CWE-Other
CVE-2006-4263 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
345790 - kaspersky_lab kaspersky_anti-hacker Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) timestamp and (2) netmask requests, which is inconsistent with the documented beha… NVD-CWE-Other
CVE-2006-4265 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm