Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1981 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34713 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1982 5 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2026-35188 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1983 5.4 警告
Network 		VMware VMware Telco Cloud Platform
VMware Aria Operations
VMware Cloud Foundation 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41724 2026-06-16 13:38 2026-06-8 Show GitHub Exploit DB Packet Storm
1984 5.3 警告
Network 		VMware Spring Framework VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-41853 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1985 6.5 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41854 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1986 7.5 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42764 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1987 7.5 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42765 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1988 5.9 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42766 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1989 5.3 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-42769 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1990 7.5 重要
Network 		マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft … 		リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CWE-787
CVE-2026-42909 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343781 - webwiz web_wiz_forums Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2006-0175 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343782 - xmame xmame Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -… NVD-CWE-Other
CVE-2006-0176 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343783 - calogic calogic_calendars Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly oth… NVD-CWE-Other
CVE-2006-0180 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343784 - acal calendar_project login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". NVD-CWE-Other
CVE-2006-0182 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343785 - acal calendar_project Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php… NVD-CWE-Other
CVE-2006-0183 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343786 - microsoft visual_studio_.net By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary… NVD-CWE-Other
CVE-2006-0187 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
343787 - estara softphone Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060. NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
343788 - estara softphone This is the vendor provided solution: "eStara has released Softphone version 3.0.1.47 to resolve the buffer overflow demonstrated in parsing SDP with long "a=" lines. Licensed customers can downl… NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
343789 - philip_loftin aspsurvey SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp. CWE-89
SQL Injection 		CVE-2006-0192 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
343790 - positive_software h-sphere Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script… NVD-CWE-Other
CVE-2006-0193 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm