Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231491 10 危険 website designs for less - Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6859 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231492 7.5 危険 webtext - WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性 - CVE-2006-6856 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231493 7.5 危険 shadowed works - Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6850 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231494 5 警告 リアルネットワークス - RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6847 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231495 10 危険 phpBB - phpBB の特定のフォームにおける脆弱性 - CVE-2006-6841 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231496 10 危険 phpBB - phpBB における脆弱性 - CVE-2006-6840 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231497 10 危険 phpBB - phpBB における脆弱性 - CVE-2006-6839 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231498 7.5 危険 rediff - Rediff Bol Downloader OCX コントロールにおける重要な情報 (ユーザ名およびパス名) を取得される脆弱性 - CVE-2006-6838 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231499 6.8 警告 sergey oblomov - Total Commander 用の ISO プラグインの LoadTree などの関数におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6837 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231500 7.5 危険 yrch - Yrch! の plugins/metasearch/plug.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6823 2012-12-20 18:02 2006-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
591 7.5 HIGH
Network
- - phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted … New CWE-863
 Incorrect Authorization
CVE-2026-46366 2026-05-19 02:25 2026-05-16 Show GitHub Exploit DB Packet Storm
592 7.6 HIGH
Network
- - phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. Attackers can craf… New CWE-79
Cross-site Scripting
CVE-2026-46367 2026-05-19 02:25 2026-05-16 Show GitHub Exploit DB Packet Storm
593 6.1 MEDIUM
Network
siemens teamcenter A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All … Update CWE-79
Cross-site Scripting
CVE-2026-33862 2026-05-19 02:23 2026-05-12 Show GitHub Exploit DB Packet Storm
594 4.3 MEDIUM
Network
dovecot
open-xchange
dovecot An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op… Update CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42006 2026-05-19 02:22 2026-05-12 Show GitHub Exploit DB Packet Storm
595 8.8 HIGH
Network
fortinet fortindr An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions… Update CWE-89
SQL Injection
CVE-2026-25088 2026-05-19 02:19 2026-05-13 Show GitHub Exploit DB Packet Storm
596 6.5 MEDIUM
Network
fortinet fortideceptor An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2… Update CWE-88
Argument Injection
CVE-2026-25690 2026-05-19 02:17 2026-05-13 Show GitHub Exploit DB Packet Storm
597 6.5 MEDIUM
Network
- - Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A simi… New CWE-617
 Reachable Assertion
CVE-2026-8843 2026-05-19 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
598 9.1 CRITICAL
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encodi… Update CWE-20
CWE-400
CWE-626
 Improper Input Validation 
 Uncontrolled Resource Consumption
 Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579 2026-05-19 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
599 7.5 HIGH
Network
- - WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQL queries with duplicated fields… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2021-47959 2026-05-19 02:05 2026-05-16 Show GitHub Exploit DB Packet Storm
600 9.8 CRITICAL
Network
- - WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation.… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-47965 2026-05-19 02:05 2026-05-16 Show GitHub Exploit DB Packet Storm