Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2681 7.5 重要
Network
Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-42403 2026-05-7 12:01 2026-05-1 Show GitHub Exploit DB Packet Storm
2682 7.2 重要
Network
Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42404 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2683 7.1 重要
Local
Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2026-42476 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2684 7.1 重要
Local
Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42477 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2685 7.5 重要
Network
Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における複数の脆弱性 CWE-125
CWE-476
CVE-2026-42478 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2686 5.5 警告
Local
Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2026-42479 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2687 9.8 緊急
Network
hashcat hashcat hashcatにおける複数の脆弱性 CWE-121
CWE-787
CVE-2026-42482 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2688 9.8 緊急
Network
hashcat hashcat hashcatにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-42483 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2689 9.8 緊急
Network
hashcat hashcat hashcatにおける境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2026-42484 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
2690 9.1 緊急
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-862
CWE-863
CVE-2026-5574 2026-05-7 12:00 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317681 - mozilla
netscape
k-meleon_project
firefox
navigator
k-meleon
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events … CWE-264
Permissions, Privileges, and Access Controls
CVE-2006-4253 2024-02-14 10:17 2006-08-22 Show GitHub Exploit DB Packet Storm
317682 - scatterchat scatterchat The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for … NVD-CWE-Other
CVE-2006-4021 2024-02-14 10:17 2006-08-18 Show GitHub Exploit DB Packet Storm
317683 - php php scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments … NVD-CWE-Other
CVE-2006-4020 2024-02-14 10:17 2006-08-9 Show GitHub Exploit DB Packet Storm
317684 - bosdev bosdates PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter. NVD-CWE-Other
CVE-2006-3957 2024-02-14 10:17 2006-08-2 Show GitHub Exploit DB Packet Storm
317685 - pkr_internet taskjitsu Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system, or authenticated user… NVD-CWE-noinfo
CVE-2006-3958 2024-02-14 10:17 2006-08-2 Show GitHub Exploit DB Packet Storm
317686 - siemens speedstream_wireless_router Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface. NVD-CWE-Other
CVE-2006-3907 2024-02-14 10:17 2006-07-28 Show GitHub Exploit DB Packet Storm
317687 - softbiz banner_exchange Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) th… NVD-CWE-Other
CVE-2006-3607 2024-02-14 10:17 2006-07-19 Show GitHub Exploit DB Packet Storm
317688 - seyeon flexwatch_network_camera Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL. NVD-CWE-Other
CVE-2006-3603 2024-02-14 10:17 2006-07-19 Show GitHub Exploit DB Packet Storm
317689 - seyeon flexwatch_network_camera Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot… NVD-CWE-Other
CVE-2006-3604 2024-02-14 10:17 2006-07-19 Show GitHub Exploit DB Packet Storm
317690 - bosdev bosclassifieds_classified_ads Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recen… NVD-CWE-Other
CVE-2006-3527 2024-02-14 10:17 2006-07-12 Show GitHub Exploit DB Packet Storm