Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
291	5.5	警告 Local	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-34657	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

292	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性 New	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34711	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

293	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-34712	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

294	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-34713	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

295	5	警告 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性 New	CWE-415 二重解放	CVE-2026-35188	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

296	5.4	警告 Network	VMware	VMware Telco Cloud Platform VMware Aria Operations VMware Cloud Foundation	VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41724	2026-06-16 13:38	2026-06-8	Show	GitHub Exploit DB Packet Storm

297	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性 New	CWE-444 HTTP リクエストスマグリング	CVE-2026-41853	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

298	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41854	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

299	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-42764	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

300	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-42765	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
360081	-	phorum	phorum	Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".	NVD-CWE-Other	CVE-2000-1230	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360082	-	phorum	phorum	code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.	NVD-CWE-Other	CVE-2000-1231	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360083	-	phorum	phorum	upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.	NVD-CWE-Other	CVE-2000-1232	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360084	-	phorum	phorum	SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.	NVD-CWE-Other	CVE-2000-1233	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360085	-	phorum	phorum	violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.	NVD-CWE-Other	CVE-2000-1234	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360086	-	oracle	application_server	The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via H…	NVD-CWE-Other	CVE-2000-1235	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360087	-	floosietek	ftgate	The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessi…	NVD-CWE-Other	CVE-2000-1237	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

360088	-	ibm	aix	AIX cdmount allows local users to gain root privileges via shell metacharacters.	NVD-CWE-Other	CVE-2000-0466	2008-09-6 05:21	2000-06-20	Show	GitHub Exploit DB Packet Storm

360089	-	analogx	proxy	Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.	NVD-CWE-Other	CVE-2000-0657	2008-09-6 05:21	2000-07-25	Show	GitHub Exploit DB Packet Storm

360090	-	cvs	cvs	The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.	NVD-CWE-Other	CVE-2000-0679	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed