Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1511 9.1 緊急
Network 		OPNsense project OPNsense OPNsenseにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-44194 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
1512 6.5 警告
Network 		OPNsense project OPNsense OPNsenseにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-44195 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
1513 9.8 緊急
Network 		フォーティネット FortiAuthenticator フォーティネットのFortiAuthenticatorにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-44277 2026-05-18 11:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1514 5.5 警告
Local 		フォーティネット FortiClient フォーティネットのFortiClientにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2026-44278 2026-05-18 11:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1515 5.5 警告
Local 		フォーティネット FortiToken Mobile フォーティネットのFortiToken MobileにおけるAndroid アプリケーションコンポーネントの不適切なエクスポートの脆弱性 CWE-926
Android アプリケーションコンポーネントの不適切なエクスポート 		CVE-2026-44279 2026-05-18 11:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1516 4.3 警告
Network 		etcd etcd etcd-ioのetcdにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44283 2026-05-18 11:25 2026-05-14 Show GitHub Exploit DB Packet Storm
1517 5.3 警告
Network 		MISP MISP MISPにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-44379 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
1518 7.2 重要
Network 		MISP MISP MISPにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44380 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
1519 5.3 警告
Network 		MISP MISP MISPにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-44381 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
1520 6.5 警告
Network 		Frappe ERPNext FrappeのERPNextにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44448 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345551 - michiel_van_baak mvblog Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors. CWE-89
SQL Injection 		CVE-2006-1751 2017-07-20 10:30 2006-04-13 Show GitHub Exploit DB Packet Storm
345552 - michiel_van_baak mvblog Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) body fields in a comment. NVD-CWE-Other
CVE-2006-1752 2017-07-20 10:30 2006-04-13 Show GitHub Exploit DB Packet Storm
345553 - debian debian_linux A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NVD-CWE-Other
CVE-2006-1753 2017-07-20 10:30 2006-04-19 Show GitHub Exploit DB Packet Storm
345554 - debian debian_linux This vulnerability is addressed in the following product releases: Fcheck, 2.7.59-7sarge1 Fcheck, 2.7.59-8 NVD-CWE-Other
CVE-2006-1753 2017-07-20 10:30 2006-04-19 Show GitHub Exploit DB Packet Storm
345555 - jetphotosoft.com jetphoto Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php, (2) Classic.vie… CWE-79
Cross-site Scripting 		CVE-2006-1760 2017-07-20 10:30 2006-04-13 Show GitHub Exploit DB Packet Storm
345556 - papoo papoo Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.ph… NVD-CWE-Other
CVE-2006-1766 2017-07-20 10:30 2006-04-13 Show GitHub Exploit DB Packet Storm
345557 - phpkit phpkit SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news… NVD-CWE-Other
CVE-2006-1773 2017-07-20 10:30 2006-04-13 Show GitHub Exploit DB Packet Storm
345558 - mambo mambo SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function … NVD-CWE-Other
CVE-2006-1794 2017-07-20 10:30 2006-04-17 Show GitHub Exploit DB Packet Storm
345559 - mambo mambo Successful exploitation requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2006-1794 2017-07-20 10:30 2006-04-17 Show GitHub Exploit DB Packet Storm
345560 - netbsd netbsd The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service (system crash) by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of … NVD-CWE-Other
CVE-2006-1797 2017-07-20 10:30 2006-04-18 Show GitHub Exploit DB Packet Storm