Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232371 5 警告 Xerox - Xerox WorkCentre などにおける特定の設定内容を変更される脆弱性 - CVE-2006-6429 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232372 7.5 危険 Xerox - Xerox WorkCentre などにおけるアクセス権を取得される脆弱性 - CVE-2006-6428 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232373 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web User Interface における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2006-6427 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232374 6.8 警告 thinkedit - ThinkEdit の design/thinkedit/render.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6426 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232375 6 警告 phpBB - phpBB のプライベートメッセージボックス実装 (privmsg.php) におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6421 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232376 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6420 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232377 7.5 危険 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE における任意のローカルファイルをインクルードされる脆弱性 - CVE-2006-6419 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232378 7.5 危険 phpleague - univert - PhpLeague - Univert PhpLeague における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6416 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
232379 4.6 警告 VMware - VMWare の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6410 2012-12-20 18:02 2006-12-9 Show GitHub Exploit DB Packet Storm
232380 5 警告 softwin - SMB の BitDefender Mail Protection におけるウィルス検出を回避される脆弱性 - CVE-2006-6405 2012-12-20 18:02 2006-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 6.1 MEDIUM
Local
- - An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation. New CWE-346
 Origin Validation Error
CVE-2025-66592 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
212 6.1 MEDIUM
Local
- - An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation. New CWE-346
 Origin Validation Error
CVE-2025-66593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
213 6.2 MEDIUM
Local
- - A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio… New CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2026-2237 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
214 8.0 HIGH
Adjacent
- - A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… New CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-3012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
215 4.2 MEDIUM
Network
- - A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at… New CWE-1288
 Improper Validation of Consistency within Input
CVE-2026-9689 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
216 7.1 HIGH
Network
- - A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri… New CWE-284
Improper Access Control
CVE-2026-1933 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
217 6.5 MEDIUM
Network
- - A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to i… New CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-2340 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
218 6.8 MEDIUM
Network
- - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token … New CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-9704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
219 6.8 MEDIUM
Network
- - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… New CWE-89
SQL Injection
CVE-2026-9617 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
220 5.3 MEDIUM
Network
- - IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message … New CWE-209
Information Exposure Through an Error Message
CVE-2024-28765 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm