Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
921	7.5	重要 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34650	2026-05-22 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

922	7.5	重要 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34651	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

923	7.5	重要 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品における不特定の脆弱性	CWE-Other その他	CVE-2026-34652	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

924	8.7	重要 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-34653	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

925	5.3	警告 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品における不特定の脆弱性	CWE-Other その他	CVE-2026-34654	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

926	4.8	警告 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-34655	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

927	4.3	警告 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品における認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-34656	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

928	4.8	警告 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-34658	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

929	3.4	低 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34685	2026-05-22 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

930	7.5	重要 Network	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-37530	2026-05-22 10:54	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345441	-	sun	storedge_6130_arrays	Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.	NVD-CWE-Other	CVE-2006-4773	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345442	-	webspell	webspell	SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter.	NVD-CWE-Other	CVE-2006-4783	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345443	-	webspell	webspell	Successful exploitation requires that "magic_quotes_gpc" is disabled.	NVD-CWE-Other	CVE-2006-4783	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345444	-	moodle	moodle	Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or …	NVD-CWE-Other	CVE-2006-4784	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345445	-	moodle	moodle	Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.	NVD-CWE-Other	CVE-2006-4786	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345446	-	alphamail	alphamail	AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained fr…	NVD-CWE-Other	CVE-2006-4787	2017-07-20 10:33	2006-09-14	Show	GitHub Exploit DB Packet Storm

345447	-	dws_systems_inc.	sql-ledger	SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.	NVD-CWE-Other	CVE-2006-4798	2017-07-20 10:33	2006-09-15	Show	GitHub Exploit DB Packet Storm

345448	-	drupal	drupal_userreview_module	Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	NVD-CWE-Other	CVE-2006-4821	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

345449	-	emusoft	emucms	Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page paramete…	NVD-CWE-Other	CVE-2006-4822	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

345450	-	claroline dokeos	claroline open_source_learning_and_knowledge_management_tool	PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP…	CWE-94 Code Injection	CVE-2006-4844	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed