Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1081 5.5 警告
Local 		GPAC GPAC GPACにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2025-55650 2026-06-17 15:35 2026-06-15 Show GitHub Exploit DB Packet Storm
1082 5.5 警告
Local 		Advanced Micro Devices (AMD) uprof Advanced Micro Devices (AMD)のuprofにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2026-0466 2026-06-17 15:35 2026-06-9 Show GitHub Exploit DB Packet Storm
1083 10 緊急
Network 		MISP MISP MISPにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-10611 2026-06-17 15:35 2026-06-2 Show GitHub Exploit DB Packet Storm
1084 6.3 警告
Local 		Zephyr Project Zephyr Zephyr ProjectのZephyrにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-10635 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1085 9.8 緊急
Network 		Altium Altium On-Prem Enterprise Server AltiumのAltium On-Prem Enterprise Serverにおける複数の脆弱性 CWE-22
CWE-798
CVE-2026-11414 2026-06-17 15:35 2026-06-5 Show GitHub Exploit DB Packet Storm
1086 8.8 重要
Network 		Altium Altium On-Prem Enterprise Server AltiumのAltium On-Prem Enterprise Serverにおける複数の脆弱性 CWE-22
CWE-434
CVE-2026-11419 2026-06-17 15:35 2026-06-5 Show GitHub Exploit DB Packet Storm
1087 9.8 緊急
Network 		Altium Altium On-Prem Enterprise Server AltiumのAltium On-Prem Enterprise Serverにおける複数の脆弱性 CWE-22
CWE-306
CVE-2026-11420 2026-06-17 15:35 2026-06-5 Show GitHub Exploit DB Packet Storm
1088 8.8 重要
Network 		Devolutions Devolutions Remote Desktop Manager DevolutionsのDevolutions Remote Desktop ManagerにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-12161 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1089 5.5 警告
Network 		Devolutions Devolutions Remote Desktop Manager DevolutionsのDevolutions Remote Desktop Managerにおけるホストの不一致による証明書の検証に関する脆弱性 CWE-297
ホストの不一致による証明書の不適切な検証 		CVE-2026-12162 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1090 8.8 重要
Network 		D-Link Corporation DCS-935L ファームウェア D-Link CorporationのDCS-935L ファームウェアにおける複数の脆弱性 CWE-119
CWE-134
CVE-2026-12174 2026-06-17 15:35 2026-06-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343701 - joomla
mambo 		moslistmessenger_component PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL… NVD-CWE-Other
CVE-2006-4229 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
343702 - lizge lizge_web_portal Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters. NVD-CWE-Other
CVE-2006-4230 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
343703 - irfanview irfanview IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file. NVD-CWE-Other
CVE-2006-4231 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
343704 - powergap powergap_business
powergap_lite 		Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and… NVD-CWE-Other
CVE-2006-4236 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343705 - mamboxchange reporter PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_a… NVD-CWE-Other
CVE-2006-4241 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343706 - joomla jim_instant_messaging_component PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_pat… NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343707 - joomla jim_instant_messaging_component Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343708 - horde horde
imp 		Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related … NVD-CWE-Other
CVE-2006-4255 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343709 - horde application_framework index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "c… NVD-CWE-Other
CVE-2006-4256 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
343710 - ibm db2 IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during… CWE-399
 Resource Management Errors 		CVE-2006-4257 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm