Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5271 9.8 緊急
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける複数の脆弱性 CWE-122
CWE-787
CWE-787
CVE-2026-3548 2026-05-1 10:47 2026-03-19 Show GitHub Exploit DB Packet Storm
5272 5.9 警告
Network 		VMware Spring AI VMwareのSpring AIにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-40966 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5273 8.6 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-40967 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5274 7.5 重要
Adjacent 		VMware Spring Boot VMwareのSpring Bootにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-40972 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5275 7 重要
Local 		VMware Spring Boot VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2026-40973 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5276 7.5 重要
Network 		VMware Spring Boot VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-40975 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5277 9.1 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40976 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5278 6.7 警告
Local 		VMware Spring Boot VMwareのSpring Bootにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-40977 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5279 8.8 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40978 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5280 6.1 警告
Local 		VMware Spring AI VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2026-40979 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347521 - neosys neon_webmail Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the… NVD-CWE-Other
CVE-2006-4953 2017-07-20 10:33 2006-09-23 Show GitHub Exploit DB Packet Storm
347522 - neosys neon_webmail The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying… NVD-CWE-Other
CVE-2006-4954 2017-07-20 10:33 2006-09-23 Show GitHub Exploit DB Packet Storm
347523 - neosys neon_webmail Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder an… NVD-CWE-Other
CVE-2006-4955 2017-07-20 10:33 2006-09-23 Show GitHub Exploit DB Packet Storm
347524 - neosys neon_webmail Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as us… NVD-CWE-Other
CVE-2006-4956 2017-07-20 10:33 2006-09-23 Show GitHub Exploit DB Packet Storm
347525 - ibm inventory_scout Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 (invscoutClient_VPD_Survey) allows attackers to overwrite arbitrary files via unspecified vectors. NVD-CWE-Other
CVE-2006-5002 2017-07-20 10:33 2006-09-27 Show GitHub Exploit DB Packet Storm
347526 - ibm aix Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors. NVD-CWE-Other
CVE-2006-5003 2017-07-20 10:33 2006-09-27 Show GitHub Exploit DB Packet Storm
347527 - buffalotech terastation_hd-htgl_firmware Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete… CWE-352
 Origin Validation Error 		CVE-2006-5175 2017-07-20 10:33 2006-10-10 Show GitHub Exploit DB Packet Storm
347528 - mole_group_ticket_booking_script mole_group_ticket_booking_script Multiple cross-site scripting (XSS) vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) address1, (… NVD-CWE-Other
CVE-2006-3049 2017-07-20 10:32 2006-06-16 Show GitHub Exploit DB Packet Storm
347529 - myphp_guestbook myphp_guestbook Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2)… NVD-CWE-Other
CVE-2006-3063 2017-07-20 10:32 2006-06-19 Show GitHub Exploit DB Packet Storm
347530 - ibm db2_universal_database Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in t… NVD-CWE-Other
CVE-2006-3067 2017-07-20 10:32 2006-06-19 Show GitHub Exploit DB Packet Storm