Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
541 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33257 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
542 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33260 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
543 8.8 重要
Network 		litellm litellm LiteLLMにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル 		CVE-2026-40217 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
544 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40517 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
545 6.7 警告
Local 		The GnuPG Project Libgcrypt The GnuPG ProjectのLibgcryptにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-41989 2026-04-30 12:14 2026-04-23 Show GitHub Exploit DB Packet Storm
546 9.8 緊急
Network 		OFFIS DCMTK OFFISのDCMTKにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5663 2026-04-30 12:14 2026-04-6 Show GitHub Exploit DB Packet Storm
547 5.5 警告
Local 		Angry IP Scanner Angry IP Scanner Angry IP Scannerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25262 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
548 7.8 重要
Local 		LizardSystems LanSpy LizardSystemsのLanSpyにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25265 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
549 5.5 警告
Local 		Angry IP Scanner Angry IP Scanner Angry IP Scannerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25266 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
550 7.8 重要
Local 		LizardSystems LanSpy LizardSystemsのLanSpyにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25268 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313361 - phpquiz phpquiz PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter. NVD-CWE-Other
CVE-2006-4834 2024-02-14 10:17 2006-09-16 Show GitHub Exploit DB Packet Storm
313362 - telekorn signkorn_guestbook PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes… NVD-CWE-Other
CVE-2006-4788 2024-02-14 10:17 2006-09-14 Show GitHub Exploit DB Packet Storm
313363 - comscripts phprog Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NVD-CWE-Other
CVE-2006-4753 2024-02-14 10:17 2006-09-14 Show GitHub Exploit DB Packet Storm
313364 - comscripts phprog Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. N… NVD-CWE-Other
CVE-2006-4754 2024-02-14 10:17 2006-09-14 Show GitHub Exploit DB Packet Storm
313365 - microsoft ie
windows_2003_server
windows_xp
windows_2000 		Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial o… NVD-CWE-Other
CVE-2006-3873 2024-02-14 10:17 2006-09-13 Show GitHub Exploit DB Packet Storm
313366 - mcgallery mcgallery_pro PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NVD-CWE-Other
CVE-2006-4720 2024-02-14 10:17 2006-09-13 Show GitHub Exploit DB Packet Storm
313367 - premod_shadow premod_shadow PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path para… NVD-CWE-Other
CVE-2006-4664 2024-02-14 10:17 2006-09-9 Show GitHub Exploit DB Packet Storm
313368 - securecomputing snapgear_sg710
snapgear_sg560
snapgear_sg565
snapgear_sg580 		Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving (1) IPSec replay windows and (2) the use of vulne… NVD-CWE-Other
CVE-2006-4613 2024-02-14 10:17 2006-09-7 Show GitHub Exploit DB Packet Storm
313369 - becubed compression_plus Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack … NVD-CWE-Other
CVE-2006-4554 2024-02-14 10:17 2006-09-6 Show GitHub Exploit DB Packet Storm
313370 - bernard_pacques yet_another_community_system_cms Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] paramet… NVD-CWE-Other
CVE-2006-4559 2024-02-14 10:17 2006-09-6 Show GitHub Exploit DB Packet Storm