Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
91 9.1 緊急
Network
axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 New CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)
CVE-2026-42264 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
92 5.7 警告
Network
Kimai project kimai Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性 New CWE-1236
CSV ファイル内の数式要素の不適切な中和
CVE-2026-42267 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
93 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-42499 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
94 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証
CVE-2026-42501 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
95 9.1 緊急
Network
Grav CMS grav Grav CMSのgravにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-42608 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
96 5.4 警告
Network
Open edX openedx Open edXのopenedxにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42857 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
97 9.9 緊急
Network
Open edX openedx Open edXのopenedxにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42858 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
98 7.5 重要
Network
マイクロソフト Microsoft Outlook Microsoft Outlook for iOS の改ざんの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-42893 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
99 7.5 重要
Network
マイクロソフト .NET ASP.NET Core のサービス拒否の脆弱性 New CWE-835
無限ループ
CVE-2026-42899 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
100 8.6 重要
Network
Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用
CVE-2026-43139 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312191 8.8 HIGH
Network
contao contao Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious files and execute them on the server. Users are advised to update to Contao 4.1… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-45398 2024-09-26 04:20 2024-09-18 Show GitHub Exploit DB Packet Storm
312192 4.8 MEDIUM
Network
eladmin eladmin eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java. CWE-79
Cross-site Scripting
CVE-2024-44676 2024-09-26 04:20 2024-09-11 Show GitHub Exploit DB Packet Storm
312193 9.8 CRITICAL
Network
eladmin eladmin eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-44677 2024-09-26 04:19 2024-09-11 Show GitHub Exploit DB Packet Storm
312194 8.8 HIGH
Network
microsoft dynamics_365_business_central Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-43460 2024-09-26 04:18 2024-09-18 Show GitHub Exploit DB Packet Storm
312195 4.6 MEDIUM
Physics
hathway skyworth_cm5100-511_firmware Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV. CWE-522
 Insufficiently Protected Credentials
CVE-2024-44815 2024-09-26 04:17 2024-09-11 Show GitHub Exploit DB Packet Storm
312196 8.8 HIGH
Network
hfo4 shudong-share A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the compon… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8338 2024-09-26 04:12 2024-08-31 Show GitHub Exploit DB Packet Storm
312197 5.3 MEDIUM
Network
getastra wp_hardening The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular ex… CWE-697
 Incorrect Comparison
CVE-2024-6641 2024-09-26 04:07 2024-09-18 Show GitHub Exploit DB Packet Storm
312198 6.1 MEDIUM
Network
svelte svelte svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-side rendering. The as… CWE-79
Cross-site Scripting
CVE-2024-45047 2024-09-26 04:06 2024-08-31 Show GitHub Exploit DB Packet Storm
312199 6.1 MEDIUM
Network
elizsoftware panel Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24. CWE-79
Cross-site Scripting
CVE-2024-6877 2024-09-26 03:57 2024-09-19 Show GitHub Exploit DB Packet Storm
312200 9.8 CRITICAL
Network
elizsoftware panel Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24. CWE-256
Plaintext Storage of a Password 
CVE-2024-5960 2024-09-26 03:55 2024-09-19 Show GitHub Exploit DB Packet Storm