Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4321 5.5 警告
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CWE-125
CVE-2026-8213 2026-05-21 10:49 2026-05-9 Show GitHub Exploit DB Packet Storm
4322 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-8510 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4323 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8513 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4324 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるライフタイムを通してのリソース制御に関する脆弱性 CWE-664
ライフタイムを通してのリソースの不適切な制御 		CVE-2026-8517 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4325 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-8519 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4326 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8522 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4327 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-8525 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4328 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8530 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4329 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-8531 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
4330 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-8534 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345701 - visualshapers ezcontents Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code via an empty GLOBALS[rootdp] parameter and an ftps URL in th… NVD-CWE-Other
CVE-2006-4477 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345702 - visualshapers ezcontents Cross-site scripting (XSS) vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the subgroupname parameter. NVD-CWE-Other
CVE-2006-4479 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345703 - nuked-klan nuked-klan Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScri… NVD-CWE-Other
CVE-2006-4480 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345704 - duware dupoll DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and … NVD-CWE-Other
CVE-2006-4487 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345705 - microsoft visual_studio Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects… NVD-CWE-Other
CVE-2006-4494 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345706 - microsoft ie
windows_2003_server 		Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects incl… NVD-CWE-Other
CVE-2006-4495 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345707 - iwebnegar iwebnegar Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter. NVD-CWE-Other
CVE-2006-4496 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345708 - iwebnegar iwebnegar SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-4497 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345709 - phpalbum.net phpalbum PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a… NVD-CWE-Other
CVE-2006-4498 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm
345710 - ztml ezportal_ztml_cms Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5… NVD-CWE-Other
CVE-2006-4500 2018-10-18 06:37 2006-09-1 Show GitHub Exploit DB Packet Storm