Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191 5.4 警告
Network 		Synology Inc. Contacts Synology Inc.のContactsにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13167 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
192 5.5 警告
Local 		Libusb Libusb Libusbにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-23679 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
193 7.8 重要
Local 		MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおける整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-25104 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
194 7.8 重要
Local 		MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-25713 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
195 5.3 警告
Network 		Espen Hovlandsdal (rexxars) eventsource-encoder Espen Hovlandsdal (rexxars)のeventsource-encoderにおける複数の脆弱性 New CWE-113
CWE-93
CVE-2026-44214 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
196 6.1 警告
Network 		Nitro Nitro Nitroにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト 		CVE-2026-44372 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
197 5.3 警告
Network 		Nitro Nitro Nitroにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-44373 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
198 7.5 重要
Network 		Lookyloo Playwright Capture LookylooのPlaywright Captureにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44439 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
199 7.8 重要
Local 		GitoxideLabs gix-fs GitoxideLabsのgix-fsにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-44471 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
200 9.9 緊急
Network 		Vowpal Wabbit Vowpal Wabbit Vowpal Wabbitにおける複数の脆弱性 New CWE-1336
CWE-78
CVE-2026-44723 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345221 - clemens_wacha php_iaddressbook Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD-CWE-Other
CVE-2006-4460 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345222 - joomla joomla Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) … NVD-CWE-Other
CVE-2006-4474 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345223 - cybozu cybozu_office
share_360 		Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) seque… NVD-CWE-Other
CVE-2006-4490 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345224 - xbiff2 xbiff2 xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance… NVD-CWE-Other
CVE-2006-4493 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345225 - sony playstation_portable Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TI… NVD-CWE-Other
CVE-2006-4507 2017-07-20 10:33 2006-09-1 Show GitHub Exploit DB Packet Storm
345226 - dec dec_openvms_alpha NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows … CWE-200
Information Exposure 		CVE-2006-4537 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345227 - learn.com learncenter Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2006-4540 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345228 - usermin
webmin 		usermin
webmin 		Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source c… CWE-79
Cross-site Scripting 		CVE-2006-4542 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345229 - usermin
webmin 		usermin
webmin 		This vulnerability is addressed in the following product releases: Webmin, Webmin, 1.296 Usermin, Usermin, 1.226 CWE-79
Cross-site Scripting 		CVE-2006-4542 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm
345230 - retro64 cr64loader_activex_control Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of … NVD-CWE-Other
CVE-2006-4555 2017-07-20 10:33 2006-09-6 Show GitHub Exploit DB Packet Storm