Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
11	6.3	警告 Network	libssh レッドハット	Red Hat OpenShift Container Platform Red Hat Enterprise Linux libssh Red Hat Hardened Images	libssh等の複数ベンダの製品におけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-0964	2026-05-1 10:49	2026-03-26	Show	GitHub Exploit DB Packet Storm

12	8.2	重要 Network	libssh レッドハット	Red Hat OpenShift Container Platform Red Hat Enterprise Linux libssh Red Hat Hardened Images	libssh等の複数ベンダの製品におけるバッファアンダーフローの脆弱性 New	CWE-124 バッファアンダーフロー	CVE-2026-0966	2026-05-1 10:49	2026-03-26	Show	GitHub Exploit DB Packet Storm

13	5.3	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 New	CWE-191 整数アンダーフロー	CVE-2026-1005	2026-05-1 10:49	2026-03-19	Show	GitHub Exploit DB Packet Storm

14	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-23657	2026-05-1 10:49	2026-04-14	Show	GitHub Exploit DB Packet Storm

15	7.5	重要 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるセキュリティチェックに関する脆弱性 New	CWE-358 不適切に実装されたセキュリティチェック	CVE-2026-2645	2026-05-1 10:48	2026-03-19	Show	GitHub Exploit DB Packet Storm

16	8.1	重要 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける複数の脆弱性 New	CWE-122 CWE-787	CVE-2026-2646	2026-05-1 10:48	2026-03-19	Show	GitHub Exploit DB Packet Storm

17	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 New	CWE-667 不適切なロック	CVE-2026-31598	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

18	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-31599	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

19	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-31600	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

20	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性 New	CWE-noinfo 情報不足	CVE-2026-31601	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313341	-	siemens	speedstream_wireless_router	Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface.	NVD-CWE-Other	CVE-2006-3907	2024-02-14 10:17	2006-07-28	Show	GitHub Exploit DB Packet Storm

313342	-	softbiz	banner_exchange	Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) th…	NVD-CWE-Other	CVE-2006-3607	2024-02-14 10:17	2006-07-19	Show	GitHub Exploit DB Packet Storm

313343	-	seyeon	flexwatch_network_camera	Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.	NVD-CWE-Other	CVE-2006-3603	2024-02-14 10:17	2006-07-19	Show	GitHub Exploit DB Packet Storm

313344	-	seyeon	flexwatch_network_camera	Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot…	NVD-CWE-Other	CVE-2006-3604	2024-02-14 10:17	2006-07-19	Show	GitHub Exploit DB Packet Storm

313345	-	bosdev	bosclassifieds_classified_ads	Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recen…	NVD-CWE-Other	CVE-2006-3527	2024-02-14 10:17	2006-07-12	Show	GitHub Exploit DB Packet Storm

313346	-	webdesignhq	sitebuilder-fx	PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.	CWE-94 Code Injection	CVE-2006-3395	2024-02-14 10:17	2006-07-7	Show	GitHub Exploit DB Packet Storm

313347	-	pkr_internet	taskjitsu	Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) titl…	NVD-CWE-Other	CVE-2006-3397	2024-02-14 10:17	2006-07-7	Show	GitHub Exploit DB Packet Storm

313348	-	pkr_internet	taskjitsu	The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2…	NVD-CWE-Other	CVE-2006-3398	2024-02-14 10:17	2006-07-7	Show	GitHub Exploit DB Packet Storm

313349	-	siemens	speedstream_wireless_router	Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-3344	2024-02-14 10:17	2006-07-4	Show	GitHub Exploit DB Packet Storm

313350	-	netsoft	smartnet	Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter.	NVD-CWE-Other	CVE-2006-3313	2024-02-14 10:17	2006-06-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed