Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
621 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-34646 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
622 7.4 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-34647 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
623 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-34648 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
624 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-34649 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
625 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-34650 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
626 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-34651 2026-05-22 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
627 7.5 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品における不特定の脆弱性 CWE-Other
その他
CVE-2026-34652 2026-05-22 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
628 8.7 重要
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-34653 2026-05-22 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
629 5.3 警告
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品における不特定の脆弱性 CWE-Other
その他
CVE-2026-34654 2026-05-22 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
630 4.8 警告
Network
アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento
アドビのAdobe Commerce等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-34655 2026-05-22 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345371 - osads_alliance_database osads_alliance_database Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in HTML-Code," possibly due to a cross-site scripting (XSS) v… NVD-CWE-Other
CVE-2006-2874 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345372 - alex news-engine SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NVD-CWE-Other
CVE-2006-2879 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345373 - pyblosxom pyblosxom Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) … NVD-CWE-Other
CVE-2006-2880 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345374 - pyblosxom pyblosxom This vulnerability is present only in the Contributed Packages of this product. NVD-CWE-Other
CVE-2006-2880 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345375 - knowledgetree knowledgetree Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in v… NVD-CWE-Other
CVE-2006-2885 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345376 - jam_warehouse knowledgetree_open_source view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting erro… NVD-CWE-Other
CVE-2006-2886 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345377 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form. NVD-CWE-Other
CVE-2006-2895 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345378 - funkboard funkboard Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors. NVD-CWE-Other
CVE-2006-2897 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345379 - cowon_america jetaudio Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including… NVD-CWE-Other
CVE-2006-2910 2017-07-20 10:31 2006-07-6 Show GitHub Exploit DB Packet Storm
345380 - out_of_the_trees_web_design selectapix Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php. NVD-CWE-Other
CVE-2006-2913 2017-07-20 10:31 2006-06-9 Show GitHub Exploit DB Packet Storm