Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248951 5.1 警告 acgv news - ACGV News の article.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4638 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
248952 5.1 警告 acgv news - ACGV News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4637 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
248953 7.5 危険 c-news.fr - C-News.fr C-News の affichage/commentaires.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4629 2012-06-26 15:37 2006-09-8 Show GitHub Exploit DB Packet Storm
248954 7.5 危険 AVAST Software s.r.o. - alwil avast! Anti-virus Engine におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4626 2012-06-26 15:37 2006-09-7 Show GitHub Exploit DB Packet Storm
248955 7.5 危険 comscripts - AnnonceV の annonce.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4622 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
248956 7.5 危険 bare concept media - Pheap の settings.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4621 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
248957 4.6 警告 Alt-N - MDaemon が稼動している Alt-N WebAdmin の useredit_account.wdm モジュールにおけるシステムのメールキューへのアクセス権を取得される脆弱性 - CVE-2006-4620 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
248958 4.6 警告 Avira - Avira AntiVir PersonalEdition Classic の更新スタートウィンドウにおける権限を取得される脆弱性 - CVE-2006-4619 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
248959 7.5 危険 dsocks - dsocks の dsocks.c の _tor_resolve 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-4611 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
248960 5.1 警告 graphiks - GrapAgenda の index.php における PHP リモートファイルインクルーションの脆弱性 - CVE-2006-4610 2012-06-26 15:37 2006-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2941 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutralization of special elemen… CWE-89
SQL Injection 		CVE-2026-40814 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2942 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special elements in a SQL SELEC… CWE-89
SQL Injection 		CVE-2026-40815 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2943 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutralization of special elem… CWE-89
SQL Injection 		CVE-2026-40816 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2944 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT comma… CWE-89
SQL Injection 		CVE-2026-40817 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2945 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of special elements in a SQL SELECT c… CWE-89
SQL Injection 		CVE-2026-40818 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2946 7.5 HIGH
Network 		- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of special elements in a SQL SELECT command. This … CWE-89
SQL Injection 		CVE-2026-40819 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2947 4.9 MEDIUM
Network 		- - A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command.… CWE-89
SQL Injection 		CVE-2026-40821 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2948 4.9 MEDIUM
Network 		- - A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command.… CWE-89
SQL Injection 		CVE-2026-40822 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2949 5.5 MEDIUM
Network 		- - A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL UPDATE command … CWE-89
SQL Injection 		CVE-2026-40823 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2950 5.5 MEDIUM
Network 		- - A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPD… CWE-89
SQL Injection 		CVE-2026-40824 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm