Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2891 5.3 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-31388 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2892 8.8 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-31435 2026-05-21 10:53 2026-04-22 Show GitHub Exploit DB Packet Storm
2893 9.8 緊急
Network 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31436 2026-05-21 10:53 2026-04-22 Show GitHub Exploit DB Packet Storm
2894 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31437 2026-05-21 10:53 2026-04-22 Show GitHub Exploit DB Packet Storm
2895 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31438 2026-05-21 10:53 2026-04-22 Show GitHub Exploit DB Packet Storm
2896 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31439 2026-05-21 10:53 2026-04-22 Show GitHub Exploit DB Packet Storm
2897 6.1 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-31906 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2898 7.5 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-31909 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2899 7.5 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-31910 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2900 9.1 緊急
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2026-31986 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345441 - linux linux_kernel Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-1857 2017-10-11 10:30 2006-05-23 Show GitHub Exploit DB Packet Storm
345442 - linux linux_kernel SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length o… CWE-20
 Improper Input Validation  		CVE-2006-1858 2017-10-11 10:30 2006-05-23 Show GitHub Exploit DB Packet Storm
345443 - linux linux_kernel The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large number of times in a way that produces a heavy system load. NVD-CWE-Other
CVE-2006-1862 2017-10-11 10:30 2006-05-25 Show GitHub Exploit DB Packet Storm
345444 - application_dynamics cartweaver_coldfusion Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords… NVD-CWE-Other
CVE-2006-2046 2017-10-11 10:30 2006-04-27 Show GitHub Exploit DB Packet Storm
345445 - linux linux_kernel Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service … NVD-CWE-Other
CVE-2006-2446 2017-10-11 10:30 2006-08-16 Show GitHub Exploit DB Packet Storm
345446 - kde
redhat 		kde
enterprise_linux
enterprise_linux_desktop 		kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually l… NVD-CWE-Other
CVE-2006-2933 2017-10-11 10:30 2006-07-28 Show GitHub Exploit DB Packet Storm
345447 - gnu mailman Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers". NVD-CWE-noinfo
CVE-2006-2941 2017-10-11 10:30 2006-09-6 Show GitHub Exploit DB Packet Storm
345448 - conectiva
linux
redhat
suse
ubuntu 		linux
linux_kernel
enterprise_linux
enterprise_linux_desktop
fedora_core
suse_linux
ubuntu_linux 		The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call wi… NVD-CWE-Other
CVE-2005-0750 2017-10-11 10:30 2005-03-27 Show GitHub Exploit DB Packet Storm
345449 - mozilla firefox The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag. NVD-CWE-Other
CVE-2005-0752 2017-10-11 10:30 2005-04-18 Show GitHub Exploit DB Packet Storm
345450 - cvs cvs Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2005-0753 2017-10-11 10:30 2005-04-18 Show GitHub Exploit DB Packet Storm