Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231371 6.8 警告 phpBB - phpBB 用の SearchIndexer の pbpbb アーカイブにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5418 2012-12-20 18:02 2006-10-20 Show GitHub Exploit DB Packet Storm
231372 7.5 危険 supermod - YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5413 2012-12-20 18:02 2006-10-20 Show GitHub Exploit DB Packet Storm
231373 6.2 警告 東芝 - 複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5405 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231374 2.6 注意 シマンテック - Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性 - CVE-2006-5404 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
231375 5.1 警告 シマンテック - Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5403 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
231376 7.5 危険 phpmybibli - PHPmybibli における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5402 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231377 7.5 危険 phprecipebook - PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5399 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231378 7.5 危険 simplog - Simplog の comments.php における SQL インジェクションの脆弱性 - CVE-2006-5398 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231379 2.1 注意 X.Org Foundation - X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性 - CVE-2006-5397 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231380 5 警告 xfire - Xfire におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5391 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized … New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62310 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
142 4.3 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62311 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
143 3.0 LOW
Adjacent
- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… New CWE-522
 Insufficiently Protected Credentials
CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
144 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
145 2.3 LOW
Adjacent
- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
146 2.6 LOW
Adjacent
- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… New CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
147 7.5 HIGH
Network
libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. Update CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
148 5.4 MEDIUM
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … New CWE-779
 Logging of Excessive Data
CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
149 8.6 HIGH
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.… New CWE-20
 Improper Input Validation 
CVE-2026-20224 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
150 5.4 MEDIUM
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform … New CWE-779
 Logging of Excessive Data
CVE-2026-20210 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm