Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229301 6.5 警告 tftgallery - TFT-Gallery における admin/index.php を使用する任意の .php ファイルをアップロードされる脆弱性 - CVE-2006-6347 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229302 10 危険 SAP - SAP IGS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6346 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229303 5 警告 Xerox - Xerox WorkCentre および WorkCentre Pro における電子メールメッセージの署名を変更される脆弱性 - CVE-2006-6431 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229304 7.8 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web services における重要な情報を取得される脆弱性 - CVE-2006-6430 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229305 5 警告 Xerox - Xerox WorkCentre などにおける特定の設定内容を変更される脆弱性 - CVE-2006-6429 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229306 7.5 危険 Xerox - Xerox WorkCentre などにおけるアクセス権を取得される脆弱性 - CVE-2006-6428 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229307 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web User Interface における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2006-6427 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229308 6.8 警告 thinkedit - ThinkEdit の design/thinkedit/render.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6426 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229309 6 警告 phpBB - phpBB のプライベートメッセージボックス実装 (privmsg.php) におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6421 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229310 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6420 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 7.4 HIGH
Network 		apache thrift Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixe… CWE-297
CWE-306
 Improper Validation of Certificate with Host Mismatch
Missing Authentication for Critical Function 		CVE-2026-41603 2026-04-29 03:42 2026-04-28 Show GitHub Exploit DB Packet Storm
1142 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender a… CWE-441
Confused Deputy 		CVE-2026-41365 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm
1143 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Remote attackers can … CWE-22
Path Traversal 		CVE-2026-41370 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm
1144 7.5 HIGH
Network 		apache thrift Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, w… CWE-762
 Mismatched Memory Management Routines 		CVE-2025-48431 2026-04-29 03:40 2026-04-28 Show GitHub Exploit DB Packet Storm
1145 7.5 HIGH
Network 		apache thrift Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to versio… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-41602 2026-04-29 03:40 2026-04-28 Show GitHub Exploit DB Packet Storm
1146 8.2 HIGH
Network 		apache thrift Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. CWE-125
Out-of-bounds Read 		CVE-2026-41604 2026-04-29 03:40 2026-04-28 Show GitHub Exploit DB Packet Storm
1147 7.3 HIGH
Network 		apache thrift Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. CWE-190
 Integer Overflow or Wraparound 		CVE-2026-41605 2026-04-29 03:39 2026-04-28 Show GitHub Exploit DB Packet Storm
1148 5.3 MEDIUM
Network 		apache thrift Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. CWE-674
 Uncontrolled Recursion 		CVE-2026-41606 2026-04-29 03:39 2026-04-28 Show GitHub Exploit DB Packet Storm
1149 6.5 MEDIUM
Network 		apache thrift Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. CWE-125
Out-of-bounds Read 		CVE-2026-41607 2026-04-29 03:39 2026-04-28 Show GitHub Exploit DB Packet Storm
1150 7.5 HIGH
Network 		apache thrift Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. CWE-674
 Uncontrolled Recursion 		CVE-2026-41636 2026-04-29 03:38 2026-04-28 Show GitHub Exploit DB Packet Storm