Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2561 7.8 重要
Local 		レッドハット
X.Org Foundation		 X.Org X Server
xwayland
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-50257 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
2562 7.8 重要
Local 		レッドハット
X.Org Foundation		 X.Org X Server
xwayland
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-50258 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
2563 7.8 重要
Local 		レッドハット
X.Org Foundation		 X.Org X Server
xwayland
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-50259 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
2564 8.6 重要
Network 		Vertex-app Vertex Vertex-appのVertexにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-40646 2026-06-9 14:12 2026-06-1 Show GitHub Exploit DB Packet Storm
2565 7.8 重要
Local 		BitDefender napoca BitDefenderのnapocaにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-10046 2026-06-9 14:12 2026-06-2 Show GitHub Exploit DB Packet Storm
2566 7.8 重要
Local 		BitDefender napoca BitDefenderのnapocaにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-10047 2026-06-9 14:11 2026-06-2 Show GitHub Exploit DB Packet Storm
2567 6.5 警告
Adjacent 		エリクソン Packet Core Gateway (PCG) エリクソンのPacket Core Gateway (PCG)における不正な構文構造の不適切な処理に関する脆弱性 CWE-228
不正な構文構造の不適切な処理 		CVE-2026-25657 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
2568 6.5 警告
Adjacent 		エリクソン Packet Core Gateway (PCG) エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性 CWE-230
欠損値の不適切な処理 		CVE-2026-25658 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
2569 6.5 警告
Adjacent 		エリクソン Packet Core Gateway (PCG) エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性 CWE-230
欠損値の不適切な処理 		CVE-2026-25659 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
2570 9.8 緊急
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるデフォルトのパスワードの使用に関する脆弱性 CWE-1393
デフォルトのパスワードの使用 		CVE-2026-35075 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344101 - usermin
webmin 		usermin
webmin 		Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, whi… NVD-CWE-Other
CVE-2006-3392 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344102 - miro_international galleria PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolu… CWE-94
Code Injection 		CVE-2006-3396 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344103 - moniwiki moniwiki Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message,… NVD-CWE-Other
CVE-2006-3399 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344104 - samba samba The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests. NVD-CWE-Other
CVE-2006-3403 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
344105 - qto qtofilemanager Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters. NVD-CWE-Other
CVE-2006-3405 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344106 - qto qtofilemanager Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter. NVD-CWE-Other
CVE-2006-3406 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344107 - smartsitecms smartsitecms PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.… NVD-CWE-Other
CVE-2006-3421 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344108 - webex_communications downloader_activexcontrol
downloader_java 		WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates t… CWE-20
 Improper Input Validation  		CVE-2006-3423 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344109 - webex_communications downloader_activexcontrol
downloader_java 		Upgrade to version 2.1.0.0. CWE-20
 Improper Input Validation  		CVE-2006-3423 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm
344110 - lumension
novell 		patchlink_update_server
zenworks 		FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which… NVD-CWE-Other
CVE-2006-3425 2018-10-19 01:47 2006-07-7 Show GitHub Exploit DB Packet Storm