Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3401 7.5 重要
Network 		Authentik Security Inc authentik Authentik Security Incのauthentikにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-41577 2026-06-8 11:47 2026-06-2 Show GitHub Exploit DB Packet Storm
3402 8.1 重要
Network 		Shopify React Router ShopifyのReact Routerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-42211 2026-06-8 11:47 2026-06-2 Show GitHub Exploit DB Packet Storm
3403 8.1 重要
Network 		budibase budibase budibaseにおけるHttpOnly 属性のない重要な Cookie に関する脆弱性 CWE-1004
HttpOnly 属性のない重要な Cookie 		CVE-2026-42239 2026-06-8 11:47 2026-05-7 Show GitHub Exploit DB Packet Storm
3404 7.5 重要
Network 		Python Software Foundation Python Python Software FoundationのPythonにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-4224 2026-06-8 11:47 2026-03-16 Show GitHub Exploit DB Packet Storm
3405 7.1 重要
Network 		Auth0 Inc. auth0.js Auth0 Inc.のauth0.jsにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-42280 2026-06-8 11:47 2026-05-27 Show GitHub Exploit DB Packet Storm
3406 9.3 緊急
Network 		Authentik Security Inc authentik Authentik Security Incのauthentikにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42849 2026-06-8 11:47 2026-06-2 Show GitHub Exploit DB Packet Storm
3407 8.3 重要
Adjacent 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-42929 2026-06-8 11:47 2026-05-29 Show GitHub Exploit DB Packet Storm
3408 8.3 重要
Adjacent 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおけるデフォルトの認証情報の使用に関する脆弱性 CWE-1392
デフォルトの認証情報の使用 		CVE-2026-42941 2026-06-8 11:46 2026-05-29 Show GitHub Exploit DB Packet Storm
3409 5.4 警告
Adjacent 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-42951 2026-06-8 11:46 2026-05-29 Show GitHub Exploit DB Packet Storm
3410 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-43084 2026-06-8 11:46 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345051 - bl4 smtp_server Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3)… NVD-CWE-Other
CVE-2006-2107 2018-10-19 01:38 2006-04-29 Show GitHub Exploit DB Packet Storm
345052 - jsboard jsboard Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to injec… NVD-CWE-Other
CVE-2006-2109 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345053 - jsboard jsboard This vulnerability is addressed in the following product release: JSBoard, JSBoard, 2.0.12 NVD-CWE-Other
CVE-2006-2109 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345054 - microsoft outlook_express A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported … CWE-200
Information Exposure 		CVE-2006-2111 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345055 - dell
fuji_xerox 		3000cn
3010cn
3100cn
3110cn
5100cn
5110cn
docuprint_181
docuprint_181_network_option_card
docuprint_211
docuprint_211_network_option_card
docuprint_c1616
docuprint_c1… 		Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware be… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-2112 2018-10-19 01:38 2006-08-25 Show GitHub Exploit DB Packet Storm
345056 - dell
fuji_xerox 		3000cn
3010cn
3100cn
3110cn
5100cn
5110cn
docuprint_181
docuprint_181_network_option_card
docuprint_211
docuprint_211_network_option_card
docuprint_c1616
docuprint_c1… 		The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Net… CWE-287
Improper Authentication 		CVE-2006-2113 2018-10-19 01:38 2006-08-25 Show GitHub Exploit DB Packet Storm
345057 - sws sws_simple_web_server Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request. NVD-CWE-Other
CVE-2006-2114 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345058 - sws sws_simple_web_server Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call. NVD-CWE-Other
CVE-2006-2115 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345059 - planet_concept planetgallery planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. NVD-CWE-Other
CVE-2006-2116 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345060 - extrosoft thyme Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page. NVD-CWE-Other
CVE-2006-2117 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm