Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1701 7 重要
Local 		Vim Vim Vimにおける複数の脆弱性 CWE-78
CWE-88
CVE-2026-46483 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
1702 7.3 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-46586 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
1703 5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-6333 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1704 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-6340 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1705 9.8 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-7301 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1706 9.1 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおけるパストラバーサルの脆弱性 CWE-35
パストラバーサル 		CVE-2026-7302 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1707 9.8 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-7304 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1708 5.5 警告
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CWE-125
CVE-2026-8212 2026-05-21 10:49 2026-05-9 Show GitHub Exploit DB Packet Storm
1709 5.5 警告
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CWE-125
CVE-2026-8213 2026-05-21 10:49 2026-05-9 Show GitHub Exploit DB Packet Storm
1710 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-8510 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311201 - php php PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as… CWE-20
 Improper Input Validation  		CVE-2006-7243 2024-11-21 09:24 2011-01-19 Show GitHub Exploit DB Packet Storm
311202 - ibm filenet_p8_application_engine The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7242 2024-11-21 09:24 2010-09-21 Show GitHub Exploit DB Packet Storm
311203 - ibm filenet_p8_application_engine The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow r… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7241 2024-11-21 09:24 2010-09-21 Show GitHub Exploit DB Packet Storm
311204 - gnome power_manager gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it e… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7240 2024-11-21 09:24 2010-09-8 Show GitHub Exploit DB Packet Storm
311205 5.5 MEDIUM
Local 		linux linux_kernel The altivec_unavailable_exception function in arch/powerpc/kernel/traps.c in the Linux kernel before 2.6.19 on 64-bit systems mishandles the case where CONFIG_ALTIVEC is defined and the CPU actually … CWE-19
 Data Processing Errors 		CVE-2006-5331 2024-11-21 09:18 2017-10-29 Show GitHub Exploit DB Packet Storm
311206 8.1 HIGH
Network 		archivemail_project
debian 		archivemail
debian_linux 		archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition. CWE-362
Race Condition 		CVE-2006-4245 2024-11-21 09:15 2019-11-6 Show GitHub Exploit DB Packet Storm
311207 9.8 CRITICAL
Network 		linux-vserver linux-vserver linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code. CWE-269
 Improper Privilege Management 		CVE-2006-4243 2024-11-21 09:15 2019-11-6 Show GitHub Exploit DB Packet Storm
311208 5.5 MEDIUM
Local 		linux linux_kernel The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of i… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-3635 2024-11-21 09:14 2017-08-7 Show GitHub Exploit DB Packet Storm
311209 9.8 CRITICAL
Network 		termpkg_project termpkg termpkg 3.3 suffers from buffer overflow. CWE-120
Classic Buffer Overflow 		CVE-2006-3100 2024-11-21 09:12 2019-11-6 Show GitHub Exploit DB Packet Storm
311210 7.5 HIGH
Network 		apache http_server A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. … - CVE-2006-20001 2024-11-21 09:10 2023-01-18 Show GitHub Exploit DB Packet Storm