Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4681 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31223 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
4682 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31224 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
4683 8.8 重要
Network 		デル Dell Automation Platform デルのDell Automation Platformにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-32658 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
4684 7.8 重要
Local 		WELLBIA.COM CO.,LTD XIGNCODE3 WELLBIA.COM CO.,LTDのXIGNCODE3における不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-3609 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
4685 4.9 警告
Network 		aiven Aiven Operator aivenのAiven Operatorにおける複数の脆弱性 CWE-269
CWE-441
CVE-2026-39961 2026-05-15 10:54 2026-04-9 Show GitHub Exploit DB Packet Storm
4686 8.8 重要
Network 		AGiXT AGiXT AGiXTにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39981 2026-05-15 10:54 2026-04-9 Show GitHub Exploit DB Packet Storm
4687 7.5 重要
Network 		Succinct SP1 SuccinctのSP1における複数の脆弱性 CWE-345
CWE-354
CVE-2026-40323 2026-05-15 10:54 2026-04-18 Show GitHub Exploit DB Packet Storm
4688 8.8 重要
Network 		Electric Sync-service ElectricのSync-serviceにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40906 2026-05-15 10:54 2026-04-21 Show GitHub Exploit DB Packet Storm
4689 6.5 警告
Network 		Apache Software Foundation Apache-airflow-providers-elasticsearch Apache Software FoundationのApache-airflow-providers-elasticsearchにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41018 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
4690 6.5 警告
Network 		BETTER-AUTH. Better Auth OAuth Provider BETTER-AUTH.のBetter Auth OAuth Providerにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41427 2026-05-15 10:54 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348551 - sharky_e-shop sharky_e-shop Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) maingroup and (2) secondgroup parameters to (a) search_pr… NVD-CWE-Other
CVE-2006-3188 2017-07-20 10:32 2006-06-23 Show GitHub Exploit DB Packet Storm
348552 - hotplug_cms hotplug_cms Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NVD-CWE-Other
CVE-2006-3189 2017-07-20 10:32 2006-06-23 Show GitHub Exploit DB Packet Storm
348553 - invision_power_services invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HT… NVD-CWE-Other
CVE-2006-3197 2017-07-20 10:32 2006-06-23 Show GitHub Exploit DB Packet Storm
348554 - netbsd netbsd The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows l… NVD-CWE-Other
CVE-2006-3202 2017-07-20 10:32 2006-06-24 Show GitHub Exploit DB Packet Storm
348555 - cjguestbook cjguestbook Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters… NVD-CWE-Other
CVE-2006-3212 2017-07-20 10:32 2006-06-24 Show GitHub Exploit DB Packet Storm
348556 - hitachi groupmax_address_server
groupmax_mail_server 		Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service (product "stop") via unspecifie… NVD-CWE-Other
CVE-2006-3214 2017-07-20 10:32 2006-06-24 Show GitHub Exploit DB Packet Storm
348557 - fortinet fortios The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode. NVD-CWE-Other
CVE-2006-3222 2017-07-20 10:32 2006-06-24 Show GitHub Exploit DB Packet Storm
348558 - apple safari Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop. NOTE: it could be argued that this is… NVD-CWE-Other
CVE-2006-3224 2017-07-20 10:32 2006-06-27 Show GitHub Exploit DB Packet Storm
348559 - sun java_system_application_server
one_application_server 		Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Editio… NVD-CWE-Other
CVE-2006-3225 2017-07-20 10:32 2006-06-27 Show GitHub Exploit DB Packet Storm
348560 - azureus_tracker azureus_tracker Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the s… NVD-CWE-Other
CVE-2006-3230 2017-07-20 10:32 2006-06-27 Show GitHub Exploit DB Packet Storm