Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4681	7.5	重要 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-33489	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4682	6.5	警告 Network	マイクロソフト	Microsoft Teams	Microsoft Team Events Portal Information Disclosure Vulnerability	CWE-285 不適切な認可	CVE-2026-33823	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4683	9	緊急 Network	マイクロソフト	Azure Managed Instance for Apache Cassandra	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	CWE-20 不適切な入力確認	CVE-2026-33844	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4684	8.2	重要 Network	マイクロソフト	Microsoft Partner Center	Microsoft Partner Center Spoofing Vulnerability	CWE-610 別領域リソースに対する外部からの制御可能な参照	CVE-2026-34327	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4685	5.3	警告 Network	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける弱いハッシュの使用に関する脆弱性	CWE-328 脆弱なハッシュの使用	CVE-2026-34527	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4686	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35072	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4687	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35073	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4688	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4689	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4690	8.8	重要 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35397	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349021	-	horizontal_shooter_bor openbor senile_team	horizontal_shooter_bor openbor beats_of_rage	Multiple format string vulnerabilities in (a) OpenBOR 2.0046 and earlier, (b) Beats of Rage (BOR) 1.0029 and earlier, and (c) Horizontal Shooter BOR (HOR) 2.0000 and earlier allow remote attackers to…	NVD-CWE-Other	CVE-2006-2537	2017-07-20 10:31	2006-05-23	Show	GitHub Exploit DB Packet Storm

349022	-	sybase	easerver	Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered …	NVD-CWE-Other	CVE-2006-2539	2017-07-20 10:31	2006-05-23	Show	GitHub Exploit DB Packet Storm

349023	-	ti_kan	xmcd	xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allows local users to cause a denial of service (disk consumptio…	NVD-CWE-Other	CVE-2006-2542	2017-07-20 10:31	2006-05-23	Show	GitHub Exploit DB Packet Storm

349024	-	bea	weblogic_server	A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, w…	NVD-CWE-Other	CVE-2006-2546	2017-07-20 10:31	2006-05-23	Show	GitHub Exploit DB Packet Storm

349025	-	php	php	The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.	NVD-CWE-Other	CVE-2006-2563	2017-07-20 10:31	2006-05-30	Show	GitHub Exploit DB Packet Storm

349026	-	dian_gemilang	dgbook	SQL injection vulnerability in index.php in DGBook 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, (4) addres…	NVD-CWE-Other	CVE-2006-2573	2017-07-20 10:31	2006-05-25	Show	GitHub Exploit DB Packet Storm

349027	-	dian_gemilang	dgbook	Successful exploitation requires that "magic_quotes_gpc" is disabled.	NVD-CWE-Other	CVE-2006-2573	2017-07-20 10:31	2006-05-25	Show	GitHub Exploit DB Packet Storm

349028	-	esyndicat	esyndicat_directory	admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP cod…	NVD-CWE-Other	CVE-2006-2578	2017-07-20 10:31	2006-05-25	Show	GitHub Exploit DB Packet Storm

349029	-	rwiki	rwiki	Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.	NVD-CWE-Other	CVE-2006-2581	2017-07-20 10:31	2006-05-25	Show	GitHub Exploit DB Packet Storm

349030	-	rwiki	rwiki	The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.	NVD-CWE-Other	CVE-2006-2582	2017-07-20 10:31	2006-05-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed