Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1 - - (複数のベンダ) (複数の製品) Collibra Platform Agentにおける複数の脆弱性 New - - 2026-06-4 11:37 2026-06-3 Show GitHub Exploit DB Packet Storm
2 - - (複数のベンダ) (複数の製品) Appsmithにおけるクロスサイトスクリプティングの脆弱性 New - - 2026-06-4 11:37 2026-06-3 Show GitHub Exploit DB Packet Storm
3 - - (複数のベンダ) (複数の製品) CISA ICS Advisory / ICS Medical Advisory(2026年06月02日) New - - 2026-06-4 11:37 2026-06-3 Show GitHub Exploit DB Packet Storm
4 - - シーメンス (複数の製品) Siemens製品に対するアップデート(2026年6月) New - - 2026-06-4 11:37 2026-06-3 Show GitHub Exploit DB Packet Storm
5 - - - サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01234)による影響について Update - CVE-2025-20027
CVE-2025-20028
CVE-2025-20064
CVE-2025-20068
CVE-2025-20073
CVE-2025-20105
CVE-2025-22444
CVE-2025-22850
2026-06-3 17:42 2026-04-24 Show GitHub Exploit DB Packet Storm
6 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-23268 2026-06-3 17:05 2026-03-18 Show GitHub Exploit DB Packet Storm
7 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-23269 2026-06-3 17:05 2026-03-18 Show GitHub Exploit DB Packet Storm
8 9.8 緊急
Network
InHand Networks ir302 ファームウェア
IR615 ファームウェア
IR315 Firmware
IR305 Firmware
InHand Networksのir302 ファームウェア等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38702 2026-06-3 17:05 2026-05-28 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network
InHand Networks ir302 ファームウェア
IR615 ファームウェア
IR315 Firmware
IR305 Firmware
InHand Networksのir302 ファームウェア等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38703 2026-06-3 17:05 2026-05-28 Show GitHub Exploit DB Packet Storm
10 9.8 緊急
Network
InHand Networks ir302 ファームウェア
IR615 ファームウェア
IR315 Firmware
IR305 Firmware
InHand Networksのir302 ファームウェア等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38704 2026-06-3 17:05 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345221 - clemens_wacha php_iaddressbook Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD-CWE-Other
CVE-2006-4460 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345222 - joomla joomla Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) … NVD-CWE-Other
CVE-2006-4474 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345223 - cybozu cybozu_office
share_360
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) seque… NVD-CWE-Other
CVE-2006-4490 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345224 - xbiff2 xbiff2 xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance… NVD-CWE-Other
CVE-2006-4493 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345225 - sony playstation_portable Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TI… NVD-CWE-Other
CVE-2006-4507 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345226 - dec dec_openvms_alpha NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows … CWE-200
Information Exposure
CVE-2006-4537 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345227 - learn.com learncenter Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2006-4540 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345228 - usermin
webmin
usermin
webmin
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source c… CWE-79
Cross-site Scripting
CVE-2006-4542 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345229 - usermin
webmin
usermin
webmin
This vulnerability is addressed in the following product releases: Webmin, Webmin, 1.296 Usermin, Usermin, 1.226 CWE-79
Cross-site Scripting
CVE-2006-4542 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345230 - retro64 cr64loader_activex_control Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of … NVD-CWE-Other
CVE-2006-4555 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm