Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6101 6.6 警告
Local
オラクル Oracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI) オラクルのOracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI)におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-35255 2026-05-8 12:10 2026-05-6 Show GitHub Exploit DB Packet Storm
6102 5.5 警告
Local
ikea DIRIGERA Firmware ikeaのDIRIGERA Firmwareにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-3588 2026-05-8 12:10 2026-03-9 Show GitHub Exploit DB Packet Storm
6103 10 緊急
Network
Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-39906 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
6104 10 緊急
Network
Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2026-39907 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
6105 7.5 重要
Network
ZTE ZXESM iEMS ZTEのZXESM iEMSにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-40436 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
6106 7.5 重要
Network
MIYAGAWA (Tatsuhiko Miyagawa) Starman MIYAGAWA (Tatsuhiko Miyagawa)のStarmanにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-40560 2026-05-8 12:10 2026-04-29 Show GitHub Exploit DB Packet Storm
6107 5.3 警告
Network
Kazuho Oku (kazuho) Starlet Kazuho Oku (kazuho)のStarletにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-40561 2026-05-8 12:10 2026-05-3 Show GitHub Exploit DB Packet Storm
6108 7.5 重要
Network
NERDVANA (Michael Conrad) Crypt-SecretBuffer NERDVANA (Michael Conrad)のCrypt-SecretBufferにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい
CVE-2026-5086 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
6109 7.5 重要
Network
JDEGUEST (Jacques Deguest) Apache::API::Password JDEGUEST (Jacques Deguest)のApache::API::Passwordにおける暗号の脆弱な PRNG の使用に関する脆弱性 CWE-338
暗号における脆弱な PRNG の使用
CVE-2026-5088 2026-05-8 12:09 2026-04-15 Show GitHub Exploit DB Packet Storm
6110 8.8 重要
Network
Cerberus, LLC Cerberus FTP Server CerberusのCerberus FTP Serverにおける安全に保持されない継承されたパーミッションに関する脆弱性 CWE-278
安全に保持されない継承されたパーミッション
CVE-2026-6265 2026-05-8 12:09 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350701 - musicmatch jukebox Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demo… NVD-CWE-Other
CVE-2005-1186 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350702 - comersus_open_technologies comersus_cart Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter. NVD-CWE-Other
CVE-2005-1188 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350703 - webcamxp webcamxp_pro Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to … NVD-CWE-Other
CVE-2005-1189 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350704 - webcamxp webcamxp_pro The vulnerability has reportedly been fixed in the beta version 2.16.478. NVD-CWE-Other
CVE-2005-1189 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350705 - webcamxp webcamxp_pro WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly ren… NVD-CWE-Other
CVE-2005-1190 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350706 - phpbb_group phpbb The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary scri… NVD-CWE-Other
CVE-2005-1193 2017-07-11 10:32 2005-05-16 Show GitHub Exploit DB Packet Storm
350707 - mplayer
xine
mplayer
xine-lib
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPla… NVD-CWE-Other
CVE-2005-1195 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350708 - azbb az_bulletin_board PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2)… NVD-CWE-Other
CVE-2005-1200 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350709 - - - Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot)… NVD-CWE-Other
CVE-2005-1201 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350710 - knusperleicht shoutbox_script Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes. NVD-CWE-Other
CVE-2005-1220 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm