Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6171 5.3 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-22745 2026-05-7 11:28 2026-04-29 Show GitHub Exploit DB Packet Storm
6172 8.8 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-23918 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
6173 8.8 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-24072 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
6174 9.8 緊急
Network
NVIDIA nvflare NVIDIAのnvflareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-24178 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
6175 8.8 重要
Network
NVIDIA nvflare NVIDIAのnvflareにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-24186 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
6176 6.5 警告
Network
NVIDIA nvflare NVIDIAのnvflareにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-24204 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
6177 5.3 警告
Network
GNOME Project
レッドハット
Red Hat Enterprise Linux
libsoup
GNOME Project等の複数ベンダの製品におけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-2708 2026-05-7 11:28 2026-04-23 Show GitHub Exploit DB Packet Storm
6178 7.1 重要
Network
Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)におけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備
CVE-2026-28402 2026-05-7 11:28 2026-02-27 Show GitHub Exploit DB Packet Storm
6179 6.5 警告
Network
アップル Container アップルのContainerにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護
CVE-2026-28909 2026-05-7 11:28 2026-04-30 Show GitHub Exploit DB Packet Storm
6180 7.5 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-29169 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349181 - ibm tivoli_directory_server IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. NVD-CWE-Other
CVE-2006-0717 2017-07-20 10:30 2006-02-15 Show GitHub Exploit DB Packet Storm
349182 - reamday_enterprises magic_news_lite PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in … CWE-94
Code Injection
CVE-2006-0723 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349183 - reamday_enterprises magic_news_lite profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modi… NVD-CWE-Other
CVE-2006-0724 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349184 - plume-cms plume_cms PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_pat… CWE-94
Code Injection
CVE-2006-0725 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349185 - cpg-nuke dragonfly_cms Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a li… NVD-CWE-Other
CVE-2006-0726 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349186 - webspell webspell SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter. NVD-CWE-Other
CVE-2006-0728 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349187 - timo_sirainen dovecot Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs"… NVD-CWE-noinfo
CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-0730 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349188 - valve_software half-life_cstrike_dedicated_server The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon ha… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-0734 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
349189 - apache log4net Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors. CWE-134
Use of Externally-Controlled Format String
CVE-2006-0743 2017-07-20 10:30 2006-03-10 Show GitHub Exploit DB Packet Storm
349190 - hivemail hivemail Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messag… NVD-CWE-Other
CVE-2006-0757 2017-07-20 10:30 2006-02-18 Show GitHub Exploit DB Packet Storm