Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248061 4.6 警告 アップル - Apple Mac OS X の fatfile_getarch2 における整数オーバーフローの脆弱性 - CVE-2006-6129 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248062 2.1 注意 アップル - Apple Mac OS X におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6126 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248063 6.8 警告 biba software - SeleniumServer Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6124 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248064 7.5 危険 creascripts - CreaScripts Creadirectory の search.asp における SQL インジェクションの脆弱性 - CVE-2006-6083 2012-06-26 15:37 2006-11-24 Show GitHub Exploit DB Packet Storm
248065 2.6 注意 Coppermine Photo Gallery - CPG における任意の変数を設定される脆弱性 - CVE-2006-6123 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248066 9.3 危険 日本エイサー - Acer Notebook の LunchApp.APlunch ActiveX コントロールにおける任意のコマンドを実行される脆弱性 - CVE-2006-6121 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248067 7.5 危険 fipsasp - fipsGallery の index1.asp における SQL インジェクションの脆弱性 - CVE-2006-6117 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248068 7.5 危険 fipsasp - fipsForum の default2.asp における SQL インジェクションの脆弱性 - CVE-2006-6116 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248069 7.5 危険 fipsasp - fipsCMS の index.asp における SQL インジェクションの脆弱性 - CVE-2006-6115 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
248070 7.5 危険 alan ward - Alan Ward A-Cart Pro における SQL インジェクションの脆弱性 - CVE-2006-6111 2012-06-26 15:37 2006-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 5.5 MEDIUM
Local 		gpac gpac A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of t… CWE-401
CWE-404
 Missing Release of Memory after Effective Lifetime
 Improper Resource Shutdown or Release 		CVE-2026-9572 2026-05-28 23:32 2026-05-27 Show GitHub Exploit DB Packet Storm
1012 5.3 MEDIUM
Network 		rexxars eventsource-encoder eventsource-encoder encodes events as well-formed EventSource/Server Sent Event (SSE) messages. Prior to 1.0.2, eventsource-encoder does not sanitize the event or id fields of an EventSourceMessage b… CWE-93
CWE-113
CRLF Injection
HTTP Response Splitting 		CVE-2026-44214 2026-05-28 23:30 2026-05-27 Show GitHub Exploit DB Packet Storm
1013 7.3 HIGH
Network 		- - A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer ove… CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2026-9605 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1014 6.3 MEDIUM
Network 		- - A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can … CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-9581 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1015 7.5 HIGH
Network 		archive\ \ Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), … CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-9538 2026-05-28 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1016 3.1 LOW
Network 		- - Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal. CWE-22
Path Traversal 		CVE-2026-49009 2026-05-28 23:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1017 9.8 CRITICAL
Network 		- - The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set. - CVE-2026-48902 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1018 7.5 HIGH
Network 		- - The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2026-48901 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1019 7.8 HIGH
Local 		- - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker ca… CWE-787
 Out-of-bounds Write 		CVE-2026-48864 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1020 - - - RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An atta… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-47161 2026-05-28 23:16 2026-05-28 Show GitHub Exploit DB Packet Storm