Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2781	4.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 回復環境のセキュリティ機能バイパスの脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-20928	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2782	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 10 1809 Microsoft Windows 10 22h2 Microsoft Wind…	Windows Management サービスの特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-20930	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2783	6	警告 Local	オラクル	JDK JRE Oracle GraalVM	オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22003	2026-04-27 11:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

2784	3.7	低 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-22746	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2785	8.1	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性	CWE-297 ホストの不一致による証明書の不適切な検証	CVE-2026-22747	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2786	6.5	警告 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-22748	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2787	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-22753	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2788	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22754	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2789	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23344	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2790	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23345	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316471	-	premod_shadow	premod_shadow	PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path para…	NVD-CWE-Other	CVE-2006-4664	2024-02-14 10:17	2006-09-9	Show	GitHub Exploit DB Packet Storm

316472	-	securecomputing	snapgear_sg710 snapgear_sg560 snapgear_sg565 snapgear_sg580	Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving (1) IPSec replay windows and (2) the use of vulne…	NVD-CWE-Other	CVE-2006-4613	2024-02-14 10:17	2006-09-7	Show	GitHub Exploit DB Packet Storm

316473	-	becubed	compression_plus	Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack …	NVD-CWE-Other	CVE-2006-4554	2024-02-14 10:17	2006-09-6	Show	GitHub Exploit DB Packet Storm

316474	-	bernard_pacques	yet_another_community_system_cms	Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] paramet…	NVD-CWE-Other	CVE-2006-4559	2024-02-14 10:17	2006-09-6	Show	GitHub Exploit DB Packet Storm

316475	-	microsoft	ie	Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an In…	NVD-CWE-Other	CVE-2006-4560	2024-02-14 10:17	2006-09-6	Show	GitHub Exploit DB Packet Storm

316476	-	mozilla	firefox	Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web ser…	NVD-CWE-Other	CVE-2006-4561	2024-02-14 10:17	2006-09-6	Show	GitHub Exploit DB Packet Storm

316477	-	2wire_inc	officeportal homeportal	The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET reque…	NVD-CWE-Other	CVE-2006-4523	2024-02-14 10:17	2006-09-2	Show	GitHub Exploit DB Packet Storm

316478	-	bernard_pacques	yet_another_community_system_cms	PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the con…	NVD-CWE-Other	CVE-2006-4532	2024-02-14 10:17	2006-09-2	Show	GitHub Exploit DB Packet Storm

316479	-	tor scatterchat	tor scatterchat	Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor t…	NVD-CWE-Other	CVE-2006-4508	2024-02-14 10:17	2006-09-1	Show	GitHub Exploit DB Packet Storm

316480	-	mozilla netscape k-meleon_project	firefox navigator k-meleon	Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4253	2024-02-14 10:17	2006-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed