Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5321 8.6 重要
Network
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品におけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用
CVE-2026-44339 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
5322 7.5 重要
Network
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-22
CWE-59
CVE-2026-44340 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
5323 7.8 重要
Local
ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-44406 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
5324 7.5 重要
Network
Zcash Foundation Zebrad Zcash FoundationのZebradにおける計算の誤りに関する脆弱性 CWE-682
計算の誤り
CVE-2026-44498 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
5325 5.3 警告
Network
Zcash Foundation zebra-network
Zebra-chain
Zebrad
Zcash FoundationのZebra-chain等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44500 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
5326 7.5 重要
Network
The Tor Project Tor The Tor ProjectのTorにおける単一、固有のアクションの実施に関する脆弱性 CWE-837
単一、固有のアクションの不適切な実施
CVE-2026-44601 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
5327 7.5 重要
Network
The Tor Project Tor The Tor ProjectのTorにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-44602 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
5328 5.5 警告
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-125
CVE-2026-8084 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
5329 7.8 重要
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CVE-2026-8086 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
5330 7.8 重要
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CVE-2026-8087 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348941 - chirpy chirpy SQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NVD-CWE-Other
CVE-2006-2266 2017-07-20 10:31 2006-05-9 Show GitHub Exploit DB Packet Storm
348942 - dokeos dokeos
dokeos_community_release
Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code v… CWE-94
Code Injection
CVE-2006-2286 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348943 - www.goel.ch 2005-comments-script Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) email, and (3) url param… NVD-CWE-Other
CVE-2006-2290 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348944 - inhouse_associates ia-calendar Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this i… NVD-CWE-Other
CVE-2006-2291 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348945 - inhouse_associates ia-calendar Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in (a) calendar_new.asp and (b) default.asp, and (2) ID param… NVD-CWE-Other
CVE-2006-2292 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348946 - expinion.net multicalendars SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information i… NVD-CWE-Other
CVE-2006-2293 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348947 - timobraun dynamic_galerie Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php. NVD-CWE-Other
CVE-2006-2295 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348948 - keyvan1.com edirectorypro SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this in… NVD-CWE-Other
CVE-2006-2296 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348949 - internet_key_exchange internet_key_exchange The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packet… NVD-CWE-Other
CVE-2006-2298 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm
348950 - internet_key_exchange internet_key_exchange Sun has released patches to address the vulnerability. NVD-CWE-Other
CVE-2006-2298 2017-07-20 10:31 2006-05-10 Show GitHub Exploit DB Packet Storm