Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3491 6.7 警告
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows リッチ テキスト エディットの特権昇格の脆弱性 CWE-415
二重解放 		CVE-2026-21530 2026-05-18 12:19 2026-05-12 Show GitHub Exploit DB Packet Storm
3492 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28847 2026-05-18 12:19 2026-05-11 Show GitHub Exploit DB Packet Storm
3493 7.5 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28873 2026-05-18 12:19 2026-05-11 Show GitHub Exploit DB Packet Storm
3494 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28902 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3495 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28903 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3496 8.1 重要
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における複数の脆弱性 CWE-116
CWE-20
CVE-2026-28907 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3497 5.5 警告
Local 		- アップルのmacOSにおける複数の脆弱性 CWE-358
CWE-693
CVE-2026-28914 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3498 7.8 重要
Local 		- アップルのmacOSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-28915 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3499 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-28920 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3500 7.5 重要
Network 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28930 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345521 - softbb softbb SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter. NVD-CWE-Other
CVE-2006-1327 2017-10-19 10:29 2006-03-21 Show GitHub Exploit DB Packet Storm
345522 - duda webalbum Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, th… NVD-CWE-Other
CVE-2006-1480 2017-10-19 10:29 2006-03-29 Show GitHub Exploit DB Packet Storm
345523 - duda webalbum Successful exploitation requires that the "magic_quotes_gpc" parameter is disabled. NVD-CWE-Other
CVE-2006-1480 2017-10-19 10:29 2006-03-29 Show GitHub Exploit DB Packet Storm
345524 - php_ticket php_ticket SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter. NVD-CWE-Other
CVE-2006-1481 2017-10-19 10:29 2006-03-29 Show GitHub Exploit DB Packet Storm
345525 - claroline claroline Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHt… NVD-CWE-Other
CVE-2006-1595 2017-10-19 10:29 2006-04-3 Show GitHub Exploit DB Packet Storm
345526 - claroline claroline Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-1595 2017-10-19 10:29 2006-04-3 Show GitHub Exploit DB Packet Storm
345527 - claroline claroline PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter. NVD-CWE-Other
CVE-2006-1596 2017-10-19 10:29 2006-04-3 Show GitHub Exploit DB Packet Storm
345528 - xine xine-lib Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream. NVD-CWE-Other
CVE-2006-1664 2017-10-19 10:29 2006-04-7 Show GitHub Exploit DB Packet Storm
345529 - xbrite xbrite_members SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-1694 2017-10-19 10:29 2006-04-11 Show GitHub Exploit DB Packet Storm
345530 - clansys clansys SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php. NVD-CWE-Other
CVE-2006-1708 2017-10-19 10:29 2006-04-11 Show GitHub Exploit DB Packet Storm