Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
31	7.5	重要 Network	デル	Dell Unisphere for PowerMax Virtual Appliance	デルのDell Unisphere for PowerMax Virtual Applianceにおける認可に関する脆弱性 New	CWE-285 不適切な認可	CVE-2022-34363	2026-06-3 17:04	2026-05-22	Show	GitHub Exploit DB Packet Storm

32	7.8	重要 Local	Synology Inc.	BeeDrive	Synology Inc.のBeeDriveにおける制御されていない検索パスの要素に関する脆弱性 New	CWE-427 制御されていない検索パスの要素	CVE-2023-52945	2026-06-3 17:04	2026-05-27	Show	GitHub Exploit DB Packet Storm

33	6.5	警告 Network	Apache Software Foundation	Ignite	Apache Software FoundationのIgniteにおける相対パストラバーサルの脆弱性 New	CWE-23 相対的パストラバーサル	CVE-2025-48977	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

34	9.1	緊急 Network	Palo Alto Networks	PAN-OS Prisma Access	Palo Alto NetworksのPAN-OS等の複数製品における検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 New	CWE-565 検証および完全性チェックを行っていない Cookie への依存	CVE-2026-0257	2026-06-3 17:04	2026-05-13	Show	GitHub Exploit DB Packet Storm

35	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10001	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

36	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10002	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

37	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New	CWE-20 CWE-noinfo	CVE-2026-10004	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

38	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性 New	CWE-362 競合状態	CVE-2026-10006	2026-06-3 17:03	2026-05-28	Show	GitHub Exploit DB Packet Storm

39	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10012	2026-06-3 17:03	2026-05-28	Show	GitHub Exploit DB Packet Storm

40	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 New	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10018	2026-06-3 17:03	2026-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345221	-	clemens_wacha	php_iaddressbook	Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	NVD-CWE-Other	CVE-2006-4460	2017-07-20 10:33	2006-09-1	Show	GitHub Exploit DB Packet Storm

345222	-	joomla	joomla	Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) …	NVD-CWE-Other	CVE-2006-4474	2017-07-20 10:33	2006-09-1	Show	GitHub Exploit DB Packet Storm

345223	-	cybozu	cybozu_office share_360	Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) seque…	NVD-CWE-Other	CVE-2006-4490	2017-07-20 10:33	2006-09-1	Show	GitHub Exploit DB Packet Storm

345224	-	xbiff2	xbiff2	xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance…	NVD-CWE-Other	CVE-2006-4493	2017-07-20 10:33	2006-09-1	Show	GitHub Exploit DB Packet Storm

345225	-	sony	playstation_portable	Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TI…	NVD-CWE-Other	CVE-2006-4507	2017-07-20 10:33	2006-09-1	Show	GitHub Exploit DB Packet Storm

345226	-	dec	dec_openvms_alpha	NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows …	CWE-200 Information Exposure	CVE-2006-4537	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

345227	-	learn.com	learncenter	Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter.	NVD-CWE-Other	CVE-2006-4540	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

345228	-	usermin webmin	usermin webmin	Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source c…	CWE-79 Cross-site Scripting	CVE-2006-4542	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

345229	-	usermin webmin	usermin webmin	This vulnerability is addressed in the following product releases: Webmin, Webmin, 1.296 Usermin, Usermin, 1.226	CWE-79 Cross-site Scripting	CVE-2006-4542	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

345230	-	retro64	cr64loader_activex_control	Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of …	NVD-CWE-Other	CVE-2006-4555	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm