Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5731	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Microsoft Excel	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32199	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

5732	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC) Microsoft PowerPoint Microsoft Office	Microsoft PowerPoint のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32200	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

5733	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける最小権限の違反に関する脆弱性	CWE-272 最小権限の違反	CVE-2026-32655	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

5734	2.7	低 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3307	2026-04-30 11:03	2026-04-21	Show	GitHub Exploit DB Packet Storm

5735	5.5	警告 Local	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 の(オンプレミス) で、情報漏えいの脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-33103	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

5736	10	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-33453	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

5737	9.4	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-33454	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

5738	7.5	重要 Network	Linaro	OP-TEE Trusted OS	LinaroのOP-TEE Trusted OSにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33662	2026-04-30 11:03	2026-04-24	Show	GitHub Exploit DB Packet Storm

5739	7.4	重要 Network	OpenProject	OpenProject	OpenProjectにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-33667	2026-04-30 11:03	2026-04-15	Show	GitHub Exploit DB Packet Storm

5740	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-35154	2026-04-30 11:03	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354061	-	roxio	toast	Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are execu…	CWE-362 Race Condition	CVE-2006-4801	2011-03-8 11:42	2006-09-15	Show	GitHub Exploit DB Packet Storm

354062	-	iodine	iodine	Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."	NVD-CWE-Other	CVE-2006-4831	2011-03-8 11:42	2006-09-16	Show	GitHub Exploit DB Packet Storm

354063	-	iodine	iodine	This vulnerability is addressed in the following product release: Iodine, Iodine, 0.3.2	NVD-CWE-Other	CVE-2006-4831	2011-03-8 11:42	2006-09-16	Show	GitHub Exploit DB Packet Storm

354064	-	joomla	joomla	Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers to perform the emailform and emailsend tasks.	NVD-CWE-Other	CVE-2006-4473	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

354065	-	joomla	joomla	Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4475	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

354066	-	joomla	joomla	Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of requir…	CWE-94 CWE-264 Code Injection Permissions, Privileges, and Access Controls	CVE-2006-4476	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

354067	-	ibm	aix	Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.	NVD-CWE-Other	CVE-2006-4522	2011-03-8 11:41	2006-09-2	Show	GitHub Exploit DB Packet Storm

354068	-	vtiger	vtiger_crm	Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspe…	NVD-CWE-Other	CVE-2006-4587	2011-03-8 11:41	2006-09-7	Show	GitHub Exploit DB Packet Storm

354069	-	vtiger	vtiger_crm	vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demon…	NVD-CWE-Other	CVE-2006-4588	2011-03-8 11:41	2006-09-7	Show	GitHub Exploit DB Packet Storm

354070	-	bare_concept_media	pheap_cms	PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenan…	NVD-CWE-Other	CVE-2006-4621	2011-03-8 11:41	2006-09-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed