Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5731 5.4 警告
Network
レッドハット build of keycloak レッドハットのbuild of keycloakにおけるリクエストの直接送信に関する脆弱性 CWE-425
CWE-noinfo
CVE-2026-7500 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
5732 8.8 重要
Network
HKUDS OpenHarness HKUDSのOpenHarnessにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-7551 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
5733 9.8 緊急
Network
Synway SMG Gateway Management Software SynwayのSMG Gateway Management SoftwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-71284 2026-05-7 10:53 2026-04-30 Show GitHub Exploit DB Packet Storm
5734 7.8 重要
Local
KDE project KCoreAddons KDE projectのKCoreAddonsにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化
CVE-2026-41526 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
5735 8.8 重要
Network
SailPoint Technologies Holdings, Inc. IdentityIQ SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5712 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5736 5.5 警告
Local
Canonical pdfunite Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2018-25306 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5737 9.8 緊急
Network
Kvcache-ai Ktransformers Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-26210 2026-05-7 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
5738 7.1 重要
Local
デル Dell/Alienware Purchased Apps デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-27105 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5739 7.8 重要
Local
entechtaiwan TViPort entechtaiwanのTViPortにおける複数の脆弱性 CWE-20
CWE-269
CVE-2026-30769 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5740 5.9 警告
Network
Elasticsearch B.V. Elastic Package Registry Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-33467 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349131 - xfairguy codeavalanche_freeforum Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and … NVD-CWE-Other
CVE-2006-2927 2017-07-20 10:31 2006-06-9 Show GitHub Exploit DB Packet Storm
349132 - sun grid_engine
n1_grid_engine
Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain acce… NVD-CWE-Other
CVE-2006-2930 2017-07-20 10:31 2006-06-9 Show GitHub Exploit DB Packet Storm
349133 - twiki twiki TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instea… NVD-CWE-Other
CVE-2006-2942 2017-07-20 10:31 2006-06-21 Show GitHub Exploit DB Packet Storm
349134 - twiki twiki Successful exploitation requires that the "MapUserToWikiName" setting is enabled. NVD-CWE-Other
CVE-2006-2942 2017-07-20 10:31 2006-06-21 Show GitHub Exploit DB Packet Storm
349135 - cgi-rescue webform Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtaine… NVD-CWE-Other
CVE-2006-2943 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm
349136 - cgi-rescue webform This vulnerability is addressed in the following product release: CGI-RESCUE, WebFORM, 4.2 NVD-CWE-Other
CVE-2006-2943 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm
349137 - cgi-rescue form2mail Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obta… NVD-CWE-Other
CVE-2006-2944 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm
349138 - andreas_gohr dokuwiki Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authenticated users to read unauthorized files via unknown attack … NVD-CWE-noinfo
CVE-2006-2945 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm
349139 - andreas_gohr dokuwiki This affects only users who have Access Control Lists enabled (off by default) and who have restricted the READ permission for certain pages for logged in users. This vulnerability is addressed in t… NVD-CWE-noinfo
CVE-2006-2945 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm
349140 - dmx_forum dmx_forum Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter. NVD-CWE-Other
CVE-2006-2947 2017-07-20 10:31 2006-06-13 Show GitHub Exploit DB Packet Storm