Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4591 8.1 重要
Network
Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける不完全なクリーンアップに関する脆弱性 CWE-459
不完全なクリーンアップ
CVE-2025-66467 2026-05-12 10:21 2026-05-8 Show GitHub Exploit DB Packet Storm
4592 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71253 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4593 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71254 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4594 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71255 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4595 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71256 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4596 8.8 重要
Network
CERN Rucio CERNのRucioにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-29080 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4597 8.8 重要
Network
CERN Rucio CERNのRucioにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-29090 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4598 7.1 重要
Network
vLLM vLLM vLLMにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-34760 2026-05-12 10:20 2026-04-2 Show GitHub Exploit DB Packet Storm
4599 8.8 重要
Network
OpenMRS OpenMRS OpenMRSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40076 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4600 9.1 緊急
Network
TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-40281 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349381 - university_of_washington pubcookie Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote a… NVD-CWE-Other
CVE-2006-1392 2017-07-20 10:30 2006-03-27 Show GitHub Exploit DB Packet Storm
349382 - university_of_washington pubcookie Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 be… NVD-CWE-Other
CVE-2006-1393 2017-07-20 10:30 2006-03-27 Show GitHub Exploit DB Packet Storm
349383 - cholod mysql_based_message_board SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the usern… NVD-CWE-Other
CVE-2006-1395 2017-07-20 10:30 2006-03-27 Show GitHub Exploit DB Packet Storm
349384 - cholod mysql_based_message_board Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of thi… NVD-CWE-Other
CVE-2006-1396 2017-07-20 10:30 2006-03-27 Show GitHub Exploit DB Packet Storm
349385 - php_lite meeting_reserve Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. NOTE: the prove… NVD-CWE-Other
CVE-2006-1399 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm
349386 - metisware instructor Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter. NVD-CWE-Other
CVE-2006-1400 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm
349387 - php_lite calendar_express Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter. … NVD-CWE-Other
CVE-2006-1401 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm
349388 - csdoom csdoom Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname or teamname to the SV_SetupUserInfo function or (2) execute… NVD-CWE-Other
CVE-2006-1402 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm
349389 - csdoom csdoom_2005 Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbit… NVD-CWE-Other
CVE-2006-1403 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm
349390 - csdoom csdoom_2005 <a href="http://cwe.mitre.org/data/definitions/134.html">CWE-134: Use of Externally-Controlled Format String</a> NVD-CWE-Other
CVE-2006-1403 2017-07-20 10:30 2006-03-28 Show GitHub Exploit DB Packet Storm