Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3671 7.1 重要
Local 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42477 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3672 7.5 重要
Network 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における複数の脆弱性 CWE-125
CWE-476
CVE-2026-42478 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3673 5.5 警告
Local 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2026-42479 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3674 9.8 緊急
Network 		hashcat hashcat hashcatにおける複数の脆弱性 CWE-121
CWE-787
CVE-2026-42482 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3675 9.8 緊急
Network 		hashcat hashcat hashcatにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-42483 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3676 9.8 緊急
Network 		hashcat hashcat hashcatにおける境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2026-42484 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
3677 9.1 緊急
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-862
CWE-863
CVE-2026-5574 2026-05-7 12:00 2026-04-5 Show GitHub Exploit DB Packet Storm
3678 7.1 重要
Local 		レッドハット
Xiph.Org		 Red Hat Enterprise Linux
Theora 		レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-5673 2026-05-7 12:00 2026-04-6 Show GitHub Exploit DB Packet Storm
3679 9.8 緊急
Network 		Sipeed Picoclaw SipeedのPicoclawにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-6987 2026-05-7 12:00 2026-04-25 Show GitHub Exploit DB Packet Storm
3680 8.8 重要
Network 		Coze Coze Studio CozeのCoze Studioにおける複数の脆弱性 CWE-74
CWE-89
CVE-2026-7023 2026-05-7 12:00 2026-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315771 4.8 MEDIUM
Network 		planet gs-4210-24p2s_firmware
gs-4210-24pl4c_firmware 		Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject ar… CWE-79
Cross-site Scripting 		CVE-2024-8457 2024-10-4 23:45 2024-09-30 Show GitHub Exploit DB Packet Storm
315772 9.8 CRITICAL
Network 		planet gs-4210-24p2s_firmware
gs-4210-24pl4c_firmware 		Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and sy… CWE-306
Missing Authentication for Critical Function 		CVE-2024-8456 2024-10-4 23:45 2024-09-30 Show GitHub Exploit DB Packet Storm
315773 5.9 MEDIUM
Network 		planet gs-4210-24p2s_firmware
gs-4210-24pl4c_firmware
igs-5225-4up1t2s_firmware 		The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user p… CWE-326
Inadequate Encryption Strength 		CVE-2024-8455 2024-10-4 23:45 2024-09-30 Show GitHub Exploit DB Packet Storm
315774 4.9 MEDIUM
Network 		planet gs-4210-24p2s_firmware
gs-4210-24pl4c_firmware 		Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and ob… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-8459 2024-10-4 23:42 2024-09-30 Show GitHub Exploit DB Packet Storm
315775 8.8 HIGH
Network 		planet gs-4210-24p2s_firmware
gs-4210-24pl4c_firmware 		Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malici… CWE-352
 Origin Validation Error 		CVE-2024-8458 2024-10-4 23:42 2024-09-30 Show GitHub Exploit DB Packet Storm
315776 7.5 HIGH
Network 		echostar fusion Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configurati… NVD-CWE-noinfo
CVE-2024-42495 2024-10-4 23:37 2024-09-6 Show GitHub Exploit DB Packet Storm
315777 4.6 MEDIUM
Physics 		echostar fusion Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configurati… CWE-522
 Insufficiently Protected Credentials 		CVE-2024-39278 2024-10-4 23:36 2024-09-6 Show GitHub Exploit DB Packet Storm
315778 - - - Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function. - CVE-2024-46080 2024-10-4 22:51 2024-10-2 Show GitHub Exploit DB Packet Storm
315779 - - - A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument… CWE-79
Cross-site Scripting 		CVE-2024-9411 2024-10-4 22:51 2024-10-2 Show GitHub Exploit DB Packet Storm
315780 - - - Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious cod… - CVE-2024-46083 2024-10-4 22:51 2024-10-2 Show GitHub Exploit DB Packet Storm