Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
61 6.1 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-30894 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
62 6.1 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-30895 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
63 9.8 緊急
Network
マイクロソフト Microsoft Entra ID Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-33843 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
64 4.3 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-35220 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
65 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-35221 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
66 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-35222 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
67 8.8 重要
Network
FreeRDP FreeRDP FreeRDPにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-40033 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
68 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40383 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
69 7.2 重要
Network
IBM Engineering Lifecycle Management IBMのEngineering Lifecycle Managementにおける危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開
CVE-2026-4051 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
70 6.5 警告
Network
struktur AG libheif struktur AGのlibheifにおける複数の脆弱性 CWE-125
CWE-476
CVE-2026-41069 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345421 - gnome screensaver gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and acces… NVD-CWE-Other
CVE-2006-1335 2017-07-20 10:30 2006-03-21 Show GitHub Exploit DB Packet Storm
345422 - gnome screensaver The vulnerability has reportedly been fixed in version 2.14. NVD-CWE-Other
CVE-2006-1335 2017-07-20 10:30 2006-03-21 Show GitHub Exploit DB Packet Storm
345423 - mailenable mailenable Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitra… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-1337 2017-07-20 10:30 2006-03-21 Show GitHub Exploit DB Packet Storm
345424 - mailenable mailenable_enterprise
mailenable_professional
Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "inc… CWE-399
 Resource Management Errors
CVE-2006-1338 2017-07-20 10:30 2006-03-21 Show GitHub Exploit DB Packet Storm
345425 - bea weblogic_server BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP. NVD-CWE-Other
CVE-2006-1351 2017-07-20 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
345426 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via … NVD-CWE-Other
CVE-2006-1352 2017-07-20 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
345427 - andrew_hsu libvc
rolo
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long l… NVD-CWE-Other
CVE-2006-1356 2017-07-20 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
345428 - oswiki oswiki Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml. NVD-CWE-Other
CVE-2006-1361 2017-07-20 10:30 2006-03-23 Show GitHub Exploit DB Packet Storm
345429 - oswiki oswiki This vulnerability is addressed in the following product release: OSWiki, OSWiki, 0.3.1 NVD-CWE-Other
CVE-2006-1361 2017-07-20 10:30 2006-03-23 Show GitHub Exploit DB Packet Storm
345430 - invision_power_services invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in c… NVD-CWE-Other
CVE-2006-1369 2017-07-20 10:30 2006-03-24 Show GitHub Exploit DB Packet Storm