Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 4:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3251 6.3 警告
Network
Tencent WeKnora TencentのWeKnoraにおける複数の脆弱性 CWE-285
CWE-639
CVE-2026-8786 2026-05-21 10:47 2026-05-18 Show GitHub Exploit DB Packet Storm
3252 7.5 重要
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-8946 2026-05-21 10:47 2026-05-19 Show GitHub Exploit DB Packet Storm
3253 7.3 重要
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8947 2026-05-21 10:47 2026-05-19 Show GitHub Exploit DB Packet Storm
3254 9.6 緊急
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8953 2026-05-21 10:47 2026-05-19 Show GitHub Exploit DB Packet Storm
3255 7.5 重要
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-8954 2026-05-21 10:47 2026-05-19 Show GitHub Exploit DB Packet Storm
3256 4.3 警告
Network
シックス・アパート株式会社 Movable Type Premium (Advanced Edition)
Movable Type
Movable Type Advanced
Movable Type Premium
Movable Typeにおける権限チェックの欠如の脆弱性 CWE-Other
その他
CVE-2026-44392 2026-05-20 14:09 2026-05-20 Show GitHub Exploit DB Packet Storm
3257 4.3 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-40416 2026-05-20 13:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3258 4.3 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける有効期限後または解放後のリソースの操作に関する脆弱性 CWE-672
有効期限後または解放後のリソースの操作
CVE-2026-4053 2026-05-20 13:31 2026-05-15 Show GitHub Exploit DB Packet Storm
3259 6.5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-4054 2026-05-20 13:31 2026-05-15 Show GitHub Exploit DB Packet Storm
3260 8.2 重要
Network
TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 CWE-184
CWE-73
CVE-2026-40893 2026-05-20 13:31 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345701 - coinsoft_technologies phpcoin PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter. NVD-CWE-Other
CVE-2006-4424 2017-10-19 10:29 2006-08-29 Show GitHub Exploit DB Packet Storm
345702 - efiction efiction index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1". NVD-CWE-Other
CVE-2006-4427 2017-10-19 10:29 2006-08-29 Show GitHub Exploit DB Packet Storm
345703 - web3king web3news PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code v… NVD-CWE-Other
CVE-2006-4452 2017-10-19 10:29 2006-08-31 Show GitHub Exploit DB Packet Storm
345704 - phpecard phpecard PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. NVD-CWE-Other
CVE-2006-4456 2017-10-19 10:29 2006-08-31 Show GitHub Exploit DB Packet Storm
345705 - phpgroupware phpgroupware Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence… NVD-CWE-Other
CVE-2006-4458 2017-10-19 10:29 2006-08-31 Show GitHub Exploit DB Packet Storm
345706 - phpgroupware phpgroupware Upgrade to phpGroupWare 0.9.16.011 NVD-CWE-Other
CVE-2006-4458 2017-10-19 10:29 2006-08-31 Show GitHub Exploit DB Packet Storm
345707 - exbb exbb_italia PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a … NVD-CWE-Other
CVE-2006-4488 2017-10-19 10:29 2006-09-1 Show GitHub Exploit DB Packet Storm
345708 - ultrize minibill Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ip… NVD-CWE-Other
CVE-2006-4489 2017-10-19 10:29 2006-09-1 Show GitHub Exploit DB Packet Storm
345709 - cms_frogss cms_frogss SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the podpis parameter. NVD-CWE-Other
CVE-2006-4536 2017-10-19 10:29 2006-09-6 Show GitHub Exploit DB Packet Storm
345710 - 8pixel.net simple_blog Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via ">" characters in the id parameter, which are … NVD-CWE-Other
CVE-2006-4592 2017-10-19 10:29 2006-09-7 Show GitHub Exploit DB Packet Storm