Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2361 4.8 警告
Network
KDDI Androidアプリ「あんしんフィルター for au」 Androidアプリ「あんしんフィルター for au」における重要情報の平文送信の脆弱性 CWE-Other
その他
CVE-2026-41281 2026-05-13 12:14 2026-05-13 Show GitHub Exploit DB Packet Storm
2362 7.8 重要
Local
Bytello Ltd. Bytello Share(Windows版) Bytello Share(Windows版)のEXE形式インストーラにおけるDLL読み込みに関する脆弱性 CWE-Other
その他
CVE-2026-44612 2026-05-13 12:05 2026-05-13 Show GitHub Exploit DB Packet Storm
2363 6.5 警告
Network
whatsapp whatsapp whatsappにおけるNULL バイトまたは NULL キャラクタの無害化に関する脆弱性 CWE-158
NULL バイトまたは NULL キャラクタの不適切な無害化
CVE-2026-23863 2026-05-13 10:27 2026-05-1 Show GitHub Exploit DB Packet Storm
2364 4.3 警告
Network
whatsapp whatsapp whatsappにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証
CVE-2026-23866 2026-05-13 10:27 2026-05-1 Show GitHub Exploit DB Packet Storm
2365 7.5 重要
Network
Postfix Project postfix Postfix Projectのpostfixにおける境界条件の判定に関する脆弱性 CWE-193
境界条件の判定
CVE-2026-43964 2026-05-13 10:27 2026-05-4 Show GitHub Exploit DB Packet Storm
2366 8 重要
Network
PHOENIX CONTACT fl mguard core tx ファームウェア
FL MGUARD 4305 Firmware
fl mguard delta tx/tx ファームウェア
fl mguard gt/gt vpn ファームウェア
FL&n…
PHOENIX CONTACTのfl mguard 2102 ファームウェア等の複数製品における保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除
CVE-2024-43384 2026-05-13 10:27 2026-05-7 Show GitHub Exploit DB Packet Storm
2367 6.5 警告
Network
Fudo Security Fudo Enterprise Fudo SecurityのFudo Enterpriseにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2025-13480 2026-05-13 10:27 2026-04-20 Show GitHub Exploit DB Packet Storm
2368 9.8 緊急
Network
Delta Electronics, INC. AS320T Firmware Delta Electronics, INC.のAS320T Firmwareにおけるバッファサイズの計算の誤りに関する脆弱性 CWE-131
正しくないバッファサイズ計算
CVE-2026-1949 2026-05-13 10:27 2026-04-24 Show GitHub Exploit DB Packet Storm
2369 9.8 緊急
Network
Delta Electronics, INC. AS320T Firmware Delta Electronics, INC.のAS320T Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-1950 2026-05-13 10:27 2026-04-24 Show GitHub Exploit DB Packet Storm
2370 9.8 緊急
Network
Delta Electronics, INC. AS320T Firmware Delta Electronics, INC.のAS320T Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-1951 2026-05-13 10:27 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345831 - cosmicphp cosmicshoppingcart SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter. NVD-CWE-Other
CVE-2006-2650 2017-07-20 10:31 2006-05-30 Show GitHub Exploit DB Packet Storm
345832 - freebsd freebsd Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar … NVD-CWE-Other
CVE-2006-2654 2017-07-20 10:31 2006-06-2 Show GitHub Exploit DB Packet Storm
345833 - freebsd freebsd The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restric… NVD-CWE-Other
CVE-2006-2655 2017-07-20 10:31 2006-06-2 Show GitHub Exploit DB Packet Storm
345834 - sitescape sitescape_forum Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames. NVD-CWE-Other
CVE-2006-2676 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345835 - sitescape sitescape_forum SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path info… NVD-CWE-Other
CVE-2006-2677 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345836 - cisco vpn_client Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows… NVD-CWE-noinfo
CVE-2006-2679 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345837 - socketmail socketmail PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, allows remote attackers to execute arbitrary PHP code via a U… CWE-94
Code Injection
CVE-2006-2681 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345838 - agtc_websolutions php-agtc_membership_system Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail … NVD-CWE-Other
CVE-2006-2687 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345839 - achievo achievo SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector p… NVD-CWE-Other
CVE-2006-2688 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
345840 - eva-web eva-web Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.p… NVD-CWE-Other
CVE-2006-2689 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm