Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6221	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-33524	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

6222	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33666	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

6223	7.5	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35064	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

6224	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35170	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

6225	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35176	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

6226	6.5	警告 Network	Coder	Code Extension Marketplace	CoderのCode Extension Marketplaceにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35454	2026-04-30 12:07	2026-04-6	Show	GitHub Exploit DB Packet Storm

6227	9.8	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-35503	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

6228	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-39462	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

6229	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31509	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

6230	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31510	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357441	-	ubuntu	ubuntu_linux	passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and …	NVD-CWE-Other	CVE-2006-3597	2008-09-6 06:07	2006-07-19	Show	GitHub Exploit DB Packet Storm

357442	-	cutephp	cutenews	Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information i…	NVD-CWE-Other	CVE-2006-3661	2008-09-6 06:07	2006-07-19	Show	GitHub Exploit DB Packet Storm

357443	-	kde	kdebase	The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.	NVD-CWE-Other	CVE-2006-3742	2008-09-6 06:07	2006-09-7	Show	GitHub Exploit DB Packet Storm

357444	-	lucid_designs	lucid_calendar	Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance …	NVD-CWE-Other	CVE-2006-3025	2008-09-6 06:06	2006-06-15	Show	GitHub Exploit DB Packet Storm

357445	-	lucid_designs	lucid_calendar	Lucid Designs, Lucid Calendar, 0.22 is unsupported. A new, supported version of this product will be released in the near future.	NVD-CWE-Other	CVE-2006-3025	2008-09-6 06:06	2006-06-15	Show	GitHub Exploit DB Packet Storm

357446	-	emailarchitect	email_server	Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover a…	NVD-CWE-Other	CVE-2006-3108	2008-09-6 06:06	2006-06-21	Show	GitHub Exploit DB Packet Storm

357447	-	canonical	spread	spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bin…	NVD-CWE-Other	CVE-2006-3118	2008-09-6 06:06	2006-07-1	Show	GitHub Exploit DB Packet Storm

357448	-	mambo	mambo	SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.	NVD-CWE-Other	CVE-2006-3263	2008-09-6 06:06	2006-06-28	Show	GitHub Exploit DB Packet Storm

357449	-	mpg123	mpg123	Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strnc…	NVD-CWE-Other	CVE-2006-3355	2008-09-6 06:06	2006-07-7	Show	GitHub Exploit DB Packet Storm

357450	-	ubuntu	ubuntu_linux	passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileg…	NVD-CWE-Other	CVE-2006-3378	2008-09-6 06:06	2006-07-7	Show	GitHub Exploit DB Packet Storm