Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
291	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-34183	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

292	5.5	警告 Local	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-34657	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

293	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34711	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

294	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34712	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

295	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34713	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

296	5	警告 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-35188	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

297	5.4	警告 Network	VMware	VMware Telco Cloud Platform VMware Aria Operations VMware Cloud Foundation	VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41724	2026-06-16 13:38	2026-06-8	Show	GitHub Exploit DB Packet Storm

298	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-41853	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

299	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41854	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

300	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-42764	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
343871	-	alkacon	opencms	Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath par…	CWE-22 Path Traversal	CVE-2006-3934	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343872	-	alkacon	opencms	This vulnerability is addressed in the following product release: Alkacon, OpenCms, 6.2.2	CWE-22 Path Traversal	CVE-2006-3934	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343873	-	alkacon	opencms	system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages…	NVD-CWE-Other	CVE-2006-3935	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343874	-	alkacon	opencms	system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, …	NVD-CWE-Other	CVE-2006-3936	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343875	-	xguestbook	xguestbook	post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation p…	NVD-CWE-Other	CVE-2006-3937	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343876	-	dotclear	dotclear	DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3) edit_link.php in ecrire/tools/blogroll/; (4) syslog/index.php, (5) theme…	NVD-CWE-Other	CVE-2006-3938	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343877	-	scriptscenter	ezupload_pro	ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, which permits changing the Extensions Mode file type; (2) acces…	NVD-CWE-Other	CVE-2006-3939	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343878	-	phpbb_group	phpbb-auction	Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.…	NVD-CWE-Other	CVE-2006-3940	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343879	-	microsoft	windows_2000 windows_2003_server windows_xp	The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that cont…	CWE-20 Improper Input Validation	CVE-2006-3942	2018-10-18 06:32	2006-08-1	Show	GitHub Exploit DB Packet Storm

343880	-	mambo	mambatstaff	PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via…	CWE-94 Code Injection	CVE-2006-3947	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm