Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247851 7.5 危険 cahier de textes - Cahier de texte (CDT) の administration/index.php における不正な管理者操作を実行される脆弱性 - CVE-2006-6849 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247852 7.5 危険 aspticker - ASPTicker の admin.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-6848 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247853 7.5 危険 cybercoded - WYWO InOut Board における SQL インジェクションの脆弱性 - CVE-2006-6846 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247854 6.8 警告 CMS Made Simple - CMS Made Simple の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6845 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247855 6.8 警告 CMS Made Simple - CMS Made Simple の optional user comment モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6844 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247856 7.5 危険 codemonkeyx - phpBB2 Plus の Acronym Mod の admin/admin_acronyms.php における SQL インジェクションの脆弱性 - CVE-2006-6842 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247857 7.5 危険 alan ward - aFAQ の faqDsp.asp における SQL インジェクションの脆弱性 - CVE-2006-6831 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247858 7.5 危険 cafelog - b2verifauth.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6830 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247859 7.8 危険 efkan forum - Efkan Forum におけるデータベースをダウンロードされる脆弱性 - CVE-2006-6829 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
247860 7.5 危険 efkan forum - Efkan Forum における SQL インジェクションの脆弱性 - CVE-2006-6828 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 7.8 HIGH
Local
- - In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion New CWE-78
OS Command 
CVE-2026-49366 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
232 8.0 HIGH
Network
- - In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account New CWE-862
 Missing Authorization
CVE-2026-49367 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
233 8.7 HIGH
Network
- - In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible New CWE-79
Cross-site Scripting
CVE-2026-49368 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
234 4.3 MEDIUM
Network
- - In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages New CWE-863
 Incorrect Authorization
CVE-2026-49369 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
235 3.4 LOW
Network
- - In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-49370 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
236 7.1 HIGH
Network
- - In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible New CWE-79
Cross-site Scripting
CVE-2026-49371 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
237 7.5 HIGH
Network
- - In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49372 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
238 7.1 HIGH
Network
- - In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings New CWE-88
Argument Injection
CVE-2026-49373 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
239 7.6 HIGH
Network
- - In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters New CWE-862
 Missing Authorization
CVE-2026-49374 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
240 6.1 MEDIUM
Network
- - In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page New CWE-79
Cross-site Scripting
CVE-2026-49375 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm