Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247991 7.5 危険 emreturk - OpenHuman における SQL インジェクションの脆弱性 - CVE-2006-6036 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247992 6.8 警告 f-art agency - BLOG:CMS の list.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6035 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247993 7.5 危険 gcis - GCIS ASPCart における SQL インジェクションの脆弱性 - CVE-2006-6031 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247994 7.5 危険 futuretec - E-Calendar Pro における SQL コマンドを実行される脆弱性 - CVE-2006-6030 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247995 5 警告 anton vlasov - Anton Vlasov DoSePa の textview.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6028 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247996 6.8 警告 bestwebapp - BestWebApp Dating Site の login_form.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6022 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247997 7.5 危険 bestwebapp - BestWebApp Dating Site のログインコンポーネントにおける SQL インジェクションの脆弱性 - CVE-2006-6021 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247998 6.8 警告 blog torrent - Blog Torrent Preview の announce.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6020 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
247999 6.8 警告 bloofox - Bill Roberts Bloo の extensions/googiespell/googlespell_proxy.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6019 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
248000 5 警告 アップル - Safari の JavaScript 実装におけるバッファオーバーフローの脆弱性 - CVE-2006-6015 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 - - - IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward() compares length $offset (the digit count of the offset, 1 to 19) agains… New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-48959 2026-05-27 17:16 2026-05-27 Show GitHub Exploit DB Packet Storm
762 - - - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification da… New CWE-248
 Uncaught Exception 		CVE-2025-15649 2026-05-27 17:16 2026-05-27 Show GitHub Exploit DB Packet Storm
763 9.9 CRITICAL
Network 		- - A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation whe… New CWE-59
Link Following 		CVE-2026-7374 2026-05-27 16:16 2026-05-26 Show GitHub Exploit DB Packet Storm
764 4.3 MEDIUM
Network 		- - Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, expose Hadoop cluster credentials in plain text through the Cluster Test API. Al… New CWE-522
 Insufficiently Protected Credentials 		CVE-2026-2255 2026-05-27 13:16 2026-05-27 Show GitHub Exploit DB Packet Storm
765 6.3 MEDIUM
Network 		- - Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to platform mail notficatio… New CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-2254 2026-05-27 13:16 2026-05-27 Show GitHub Exploit DB Packet Storm
766 7.7 HIGH
Network 		- - Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities. New CWE-611
XXE 		CVE-2026-2253 2026-05-27 13:16 2026-05-27 Show GitHub Exploit DB Packet Storm
767 - - - Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available. The random_bytes function fell back to using the built-in rand() function when… New CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2026-8647 2026-05-27 11:16 2026-05-27 Show GitHub Exploit DB Packet Storm
768 - - - In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty bu… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-49017 2026-05-27 11:16 2026-05-27 Show GitHub Exploit DB Packet Storm
769 9.8 CRITICAL
Network 		pavel-odintsov fastnetmon FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp). Five methods (append_dynamic_buffer,… New CWE-787
CWE-122
CWE-193
 Out-of-bounds Write
Heap-based Buffer Overflow
 Off-by-one Error 		CVE-2026-48689 2026-05-27 11:16 2026-05-27 Show GitHub Exploit DB Packet Storm
770 - - - A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insu… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9312 2026-05-27 09:16 2026-05-27 Show GitHub Exploit DB Packet Storm