Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
981 8.8 重要
Network
ABB T-MAC Plus ABBのT-MAC Plusにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2025-14772 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
982 5.4 警告
Network
ABB T-MAC Plus ABBのT-MAC Plusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-14773 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
983 7.4 重要
Adjacent
ABB T-MAC Plus ABBのT-MAC Plusにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2025-14774 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
984 5.4 警告
Network
Koha Koha Kohaにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-26378 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
985 7.8 重要
Local
Canonical Ubuntu CanonicalのUbuntuにおける権限の連鎖に関する脆弱性 CWE-268
権限の連鎖
CVE-2026-3888 2026-06-8 11:50 2026-03-17 Show GitHub Exploit DB Packet Storm
986 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
987 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
988 7.5 重要
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
989 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性 CWE-489
間違ったセッションへのデータの漏洩
CVE-2026-49188 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
990 7.8 重要
Local
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-49189 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344871 - sun solaris Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the "/proc" filesystem.… NVD-CWE-Other
CVE-2006-0191 2017-10-11 10:30 2006-01-13 Show GitHub Exploit DB Packet Storm
344872 - squirrelmail squirrelmail Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" a… NVD-CWE-Other
CVE-2006-0195 2017-10-11 10:30 2006-02-24 Show GitHub Exploit DB Packet Storm
344873 - htmltonuke htmltonuke PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL… CWE-94
Code Injection
CVE-2006-0308 2017-10-11 10:30 2006-01-19 Show GitHub Exploit DB Packet Storm
344874 - cisco aironet_ap1100
aironet_ap1130ag
aironet_ap1200
aironet_ap1230ag
aironet_ap1240ag
aironet_ap1300
aironet_ap1400
aironet_ap350
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections)… CWE-399
 Resource Management Errors
CVE-2006-0354 2017-10-11 10:30 2006-01-23 Show GitHub Exploit DB Packet Storm
344875 - squirrelmail squirrelmail CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select comm… NVD-CWE-Other
CVE-2006-0377 2017-10-11 10:30 2006-02-24 Show GitHub Exploit DB Packet Storm
344876 - hp hp-ux Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors. NVD-CWE-Other
CVE-2006-0436 2017-10-11 10:30 2006-01-26 Show GitHub Exploit DB Packet Storm
344877 - greg_roelofs libpng Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-0481 2017-10-11 10:30 2006-02-1 Show GitHub Exploit DB Packet Storm
344878 - cisco ios The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting… NVD-CWE-Other
CVE-2006-0485 2017-10-11 10:30 2006-02-1 Show GitHub Exploit DB Packet Storm
344879 - cisco ios Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different l… NVD-CWE-Other
CVE-2006-0486 2017-10-11 10:30 2006-02-1 Show GitHub Exploit DB Packet Storm
344880 - sun solaris Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vector… NVD-CWE-Other
CVE-2006-0516 2017-10-11 10:30 2006-02-2 Show GitHub Exploit DB Packet Storm