Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
721 8.8 重要
Network 		Altium Altium On-Prem Enterprise Server AltiumのAltium On-Prem Enterprise Serverにおける複数の脆弱性 CWE-22
CWE-434
CVE-2026-11419 2026-06-17 15:35 2026-06-5 Show GitHub Exploit DB Packet Storm
722 9.8 緊急
Network 		Altium Altium On-Prem Enterprise Server AltiumのAltium On-Prem Enterprise Serverにおける複数の脆弱性 CWE-22
CWE-306
CVE-2026-11420 2026-06-17 15:35 2026-06-5 Show GitHub Exploit DB Packet Storm
723 8.8 重要
Network 		Devolutions Devolutions Remote Desktop Manager DevolutionsのDevolutions Remote Desktop ManagerにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-12161 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
724 5.5 警告
Network 		Devolutions Devolutions Remote Desktop Manager DevolutionsのDevolutions Remote Desktop Managerにおけるホストの不一致による証明書の検証に関する脆弱性 CWE-297
ホストの不一致による証明書の不適切な検証 		CVE-2026-12162 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
725 8.8 重要
Network 		D-Link Corporation DCS-935L ファームウェア D-Link CorporationのDCS-935L ファームウェアにおける複数の脆弱性 CWE-119
CWE-134
CVE-2026-12174 2026-06-17 15:35 2026-06-13 Show GitHub Exploit DB Packet Storm
726 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-12289 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
727 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-12298 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
728 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-12299 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
729 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-12303 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
730 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-200
CWE-688
CVE-2026-12311 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343861 - wired_community_software wwwthreads Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter. NVD-CWE-Other
CVE-2006-3909 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343862 - php_live php_live PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setu… NVD-CWE-Other
CVE-2006-3911 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343863 - freeciv freeciv Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negativ… NVD-CWE-Other
CVE-2006-3913 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343864 - blackboard blackboard_academic_suite Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through dis… NVD-CWE-Other
CVE-2006-3914 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343865 - fire-mouse fire-mouse_toplist Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Sei… NVD-CWE-Other
CVE-2006-3923 2018-10-18 06:32 2006-07-29 Show GitHub Exploit DB Packet Storm
343866 - zyxel prestige_660h-61 Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script… NVD-CWE-Other
CVE-2006-3929 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343867 - mamboxchange a6mambohelpdesk PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosCon… NVD-CWE-Other
CVE-2006-3930 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343868 - tuomas_airaksinen midirecord Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via a long command line argument (filename). NOTE: This may n… NVD-CWE-Other
CVE-2006-3931 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343869 - alkacon opencms Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body. NVD-CWE-Other
CVE-2006-3933 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm
343870 - alkacon opencms This vulnerability is addressed in the following product release: Alkacon, OpenCms, 6.2.2 NVD-CWE-Other
CVE-2006-3933 2018-10-18 06:32 2006-08-1 Show GitHub Exploit DB Packet Storm