Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231181 5 警告 wabbit - Wabbit PHP Gallery の script.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6185 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
231182 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan 用の PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe におけるバッファオーバーフローの脆弱性 - CVE-2006-6179 2012-12-20 18:02 2006-06-6 Show GitHub Exploit DB Packet Storm
231183 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan 用の PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe におけるバッファオーバーフローの脆弱性 - CVE-2006-6178 2012-12-20 18:02 2006-05-26 Show GitHub Exploit DB Packet Storm
231184 7.5 危険 Tiki Software Community Association - TikiWiki の tiki-register.php における "スパム通知" を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6168 2012-12-20 18:02 2006-11-6 Show GitHub Exploit DB Packet Storm
231185 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6166 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
231186 4.3 警告 Tiki Software Community Association - TikiWiki の tiki-setup_base.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-6163 2012-12-20 18:02 2006-11-6 Show GitHub Exploit DB Packet Storm
231187 4.3 警告 Tiki Software Community Association - Tikiwiki の featured_link.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-6162 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
231188 4.3 警告 vspin.net - vSpin.net Classified System におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6153 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
231189 7.5 危険 vspin.net - vSpin.net Classified System における SQL インジェクションの脆弱性 - CVE-2006-6152 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
231190 2.6 注意 takeshi kanno - Takeshi Kanno libharu2 の hpdf_page_operator.c におけるバッファオーバーフローの脆弱性 - CVE-2006-6146 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
721 8.8 HIGH
Network 		azuracast azuracast AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request parameter in the Flow.js media upload endpoint (POST /api/station/{station_id}… Update CWE-22
Path Traversal 		CVE-2026-42605 2026-05-15 02:34 2026-05-10 Show GitHub Exploit DB Packet Storm
722 8.8 HIGH
Network 		azuracast azuracast AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded-Host HTTP header with… Update CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2026-42606 2026-05-15 02:31 2026-05-10 Show GitHub Exploit DB Packet Storm
723 5.1 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allo… New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62305 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
724 5.1 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details,… New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62308 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
725 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to… New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62309 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
726 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized … New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-62310 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
727 4.3 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a… New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-62311 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
728 3.0 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… New CWE-522
 Insufficiently Protected Credentials 		CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
729 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
730 2.3 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm