Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6131 7.5 重要
Network 		FirebirdSQL Firebird FirebirdSQLのFirebirdにおける不正な構文構造の不適切な処理に関する脆弱性 CWE-228
不正な構文構造の不適切な処理 		CVE-2026-34232 2026-04-30 12:30 2026-04-17 Show GitHub Exploit DB Packet Storm
6132 5.3 警告
Network 		オラクル Oracle GoldenGate オラクルのOracle GoldenGateにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34273 2026-04-30 12:30 2026-04-21 Show GitHub Exploit DB Packet Storm
6133 8.1 重要
Network 		getkirby kirby getkirbyのkirbyにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-34587 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
6134 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-34989 2026-04-30 12:30 2026-04-6 Show GitHub Exploit DB Packet Storm
6135 7.5 重要
Network 		Linux Foundation Antrea Linux FoundationのAntreaにおける重要なデータの暗号化の欠如に関する脆弱性 CWE-311
重要なデータの暗号化の欠如 		CVE-2026-34992 2026-04-30 12:29 2026-04-6 Show GitHub Exploit DB Packet Storm
6136 7.5 重要
Network 		FirebirdSQL Firebird FirebirdSQLのFirebirdにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2026-35215 2026-04-30 12:29 2026-04-17 Show GitHub Exploit DB Packet Storm
6137 8 重要
Adjacent 		フィリップス Hue Bridge V2 ファームウェア フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-3555 2026-04-30 12:29 2026-03-16 Show GitHub Exploit DB Packet Storm
6138 8.8 重要
Adjacent 		フィリップス Hue Bridge V2 ファームウェア フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-3556 2026-04-30 12:29 2026-03-16 Show GitHub Exploit DB Packet Storm
6139 8 重要
Adjacent 		フィリップス Hue Bridge V2 ファームウェア フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-3557 2026-04-30 12:29 2026-03-16 Show GitHub Exploit DB Packet Storm
6140 4.8 警告
Network 		NSA Emissary NSAのEmissaryにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35571 2026-04-30 12:29 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349091 - toenda_software_development toendacms Successful exploitation requires that the user is running a browser that has not URL-encoded the request (e.g. Internet Explorer). NVD-CWE-Other
CVE-2006-2799 2017-07-20 10:31 2006-06-3 Show GitHub Exploit DB Packet Storm
349092 - unak unak_cms Multiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u_a or (2) u_s parameters. NOTE: this mi… CWE-79
Cross-site Scripting 		CVE-2006-2800 2017-07-20 10:31 2006-06-3 Show GitHub Exploit DB Packet Storm
349093 - unak unak_cms Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) u_a or (2) u_s parameters. NVD-CWE-Other
CVE-2006-2801 2017-07-20 10:31 2006-06-3 Show GitHub Exploit DB Packet Storm
349094 - goss icm Cross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM) 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword param… NVD-CWE-Other
CVE-2006-2804 2017-07-20 10:31 2006-06-3 Show GitHub Exploit DB Packet Storm
349095 - tekno.portal tekno.portal SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the detai… NVD-CWE-Other
CVE-2006-2817 2017-07-20 10:31 2006-06-6 Show GitHub Exploit DB Packet Storm
349096 - cpanel cpanel cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to byp… NVD-CWE-Other
CVE-2006-2825 2017-07-20 10:31 2006-06-6 Show GitHub Exploit DB Packet Storm
349097 - phplib_team phplib SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a … NVD-CWE-Other
CVE-2006-2826 2017-07-20 10:31 2006-06-6 Show GitHub Exploit DB Packet Storm
349098 - tibco hawk
hawk_monitoring_agent
runtime_agent 		Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for tibh… NVD-CWE-Other
CVE-2006-2829 2017-07-20 10:31 2006-06-6 Show GitHub Exploit DB Packet Storm
349099 - tibco hawk
rendezvous
runtime_agent 		Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code … NVD-CWE-Other
CVE-2006-2830 2017-07-20 10:31 2006-06-6 Show GitHub Exploit DB Packet Storm
349100 - pineapple_technologies lore SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter. NVD-CWE-Other
CVE-2006-2836 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm