Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3981 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-29220 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
3982 7.3 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-29226 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
3983 7.5 重要
Network 		HSC MailInspector HSCのMailInspectorにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-29962 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
3984 7.5 重要
Network 		HSC MailInspector HSCのMailInspectorにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-29963 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
3985 6.1 警告
Network 		HSC MailInspector HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-29964 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
3986 6.1 警告
Network 		HSC MailInspector HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-29965 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
3987 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-31378 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
3988 6.1 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける複数の脆弱性 CWE-22
CWE-79
CWE-94
CVE-2026-31379 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
3989 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化 		CVE-2026-31380 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
3990 5.3 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-31387 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345731 - spoonlabs vivvo_article_management_cms SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parame… NVD-CWE-Other
CVE-2006-4715 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345732 - spoonlabs vivvo_article_management_cms This vulnerability is addressed in a patch for version 3.25 of this product. NVD-CWE-Other
CVE-2006-4715 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345733 - fire_soft_board fire_soft_board PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter. NVD-CWE-Other
CVE-2006-4716 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345734 - myabracadaweb myabracadaweb Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1… NVD-CWE-Other
CVE-2006-4719 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345735 - myabracadaweb myabracadaweb Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4719 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345736 - raidenhttpd raidenhttpd PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP cod… NVD-CWE-Other
CVE-2006-4723 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345737 - raidenhttpd raidenhttpd Successful exploitation requires that "register_globals" and "WebAdmin" are enabled. NVD-CWE-Other
CVE-2006-4723 2017-10-19 10:29 2006-09-13 Show GitHub Exploit DB Packet Storm
345738 - openi-cms_group openi-cms PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[open… NVD-CWE-Other
CVE-2006-4750 2017-10-19 10:29 2006-09-14 Show GitHub Exploit DB Packet Storm
345739 - openi-cms_group openi-cms Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4750 2017-10-19 10:29 2006-09-14 Show GitHub Exploit DB Packet Storm
345740 - gtasoft p4cms PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abs_pfad parameter. NVD-CWE-Other
CVE-2006-4769 2017-10-19 10:29 2006-09-14 Show GitHub Exploit DB Packet Storm