Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229201 2.6 注意 CutePHP - CuteNews の index.PHP におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3661 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229202 5 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3659 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229203 5 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3658 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229204 5 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3657 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229205 2.6 注意 マイクロソフト - Microsoft Works Spreadsheet の wksss.exe におけるバッファオーバーフローの脆弱性 - CVE-2006-3654 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229206 2.6 注意 マイクロソフト - Microsoft Works Spreadsheet の wksss.exe におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3653 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229207 7.5 危険 マイクロソフト - Microsoft ISA Server におけるファイル拡張子フィルタを回避される脆弱性 - CVE-2006-3652 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229208 6.5 警告 ossp - OSSP shiela における CVS サーバ上で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2006-3633 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
229209 5 警告 flv - FLV Player における重要な情報を取得される脆弱性 - CVE-2006-3625 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
229210 4.3 警告 flv - FLV Player におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3624 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 8.2 HIGH
Network 		- - When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via c… New CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-40022 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
442 9.8 CRITICAL
Network 		- - The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-41409 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
443 8.8 HIGH
Network 		- - The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInput… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40858 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
444 10.0 CRITICAL
Network 		- - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component. Apache Camel's camel-coap component is vulnerable to Camel message … New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-33453 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
445 5.5 MEDIUM
Local 		- - Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate. New CWE-248
 Uncaught Exception 		CVE-2026-5937 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
446 5.5 MEDIUM
Local 		- - Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service. New CWE-691
 Insufficient Control Flow Management 		CVE-2026-5938 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
447 5.5 MEDIUM
Local 		- - A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution. New CWE-416
 Use After Free 		CVE-2026-5939 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
448 7.8 HIGH
Local 		- - Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes. New CWE-416
 Use After Free 		CVE-2026-5940 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
449 7.8 HIGH
Local 		- - Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during inte… New CWE-20
 Improper Input Validation  		CVE-2026-5941 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
450 5.5 MEDIUM
Local 		- - Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program. New CWE-416
 Use After Free 		CVE-2026-5942 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm