Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5631 8.1 重要
Network 		Statamic Statamic Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 		CVE-2026-41175 2026-04-30 12:27 2026-04-22 Show GitHub Exploit DB Packet Storm
5632 9.8 緊急
Network 		Rclone Rclone Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-41176 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5633 9.8 緊急
Network 		Rclone Rclone Rcloneにおける複数の脆弱性 CWE-306
CWE-78
CVE-2026-41179 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5634 9.9 緊急
Network 		Froxlor Froxlor FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2026-41228 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5635 9.1 緊急
Network 		Froxlor Froxlor Froxlorにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41229 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5636 8.5 重要
Network 		Froxlor Froxlor FroxlorにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-41230 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5637 7.5 重要
Network 		Froxlor Froxlor Froxlorにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-41231 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5638 5 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41232 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5639 5.4 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41233 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5640 8.6 重要
Local 		OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御 		CVE-2026-41294 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348501 - nikolay_avrionov explorer_xp Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter. NVD-CWE-Other
CVE-2006-1492 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348502 - nikolay_avrionov explorer_xp Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter. NOTE: it is possible that this issue is re… NVD-CWE-Other
CVE-2006-1493 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348503 - vihor vihordesign Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is pro… NVD-CWE-Other
CVE-2006-1496 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348504 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links. NVD-CWE-Other
CVE-2006-1498 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348505 - tilde tilde_cms SQL injection vulnerability in index.php in Tilde CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2006-1500 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348506 - oneorzero oneorzero SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action. CWE-89
SQL Injection 		CVE-2006-1501 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348507 - mh_software connect_daily Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cale… NVD-CWE-Other
CVE-2006-1508 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348508 - microsoft .net_framework Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers t… NVD-CWE-Other
CVE-2006-1510 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348509 - microsoft .net_framework Succesful exploitation can only occur when ntdll.dll system library is used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK packages. NVD-CWE-Other
CVE-2006-1510 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm
348510 - microsoft .net_framework Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name. NVD-CWE-Other
CVE-2006-1511 2017-07-20 10:30 2006-03-30 Show GitHub Exploit DB Packet Storm