Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1131 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35373 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1132 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35374 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1133 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35375 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1134 5.8 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35376 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1135 8.8 重要
Network 		DBitNet N300 T1 Pro ファームウェア DBitNetのN300 T1 Pro ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-36956 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
1136 7.5 重要
Network 		DBitNet N300 T1 Pro ファームウェア DBitNetのN300 T1 Pro ファームウェアにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-36957 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
1137 4.4 警告
Local 		Absolute Software secure access Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40949 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
1138 6.5 警告
Network 		Absolute Software secure access Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40950 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
1139 5.5 警告
Local 		Absolute Software secure access Absolute Softwareのsecure accessにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40951 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
1140 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41274 2026-05-7 11:26 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312771 9.8 CRITICAL
Network 		nelzkie15 pet_shop_management_system A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of th… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-8341 2024-09-5 01:16 2024-08-31 Show GitHub Exploit DB Packet Storm
312772 9.8 CRITICAL
Network 		oretnom23 electric_billing_management_system A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the … CWE-89
SQL Injection 		CVE-2024-8340 2024-09-5 01:14 2024-08-31 Show GitHub Exploit DB Packet Storm
312773 9.8 CRITICAL
Network 		oretnom23 electric_billing_management_system A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of th… CWE-89
SQL Injection 		CVE-2024-8339 2024-09-5 01:14 2024-08-31 Show GitHub Exploit DB Packet Storm
312774 9.8 CRITICAL
Network 		oretnom23 music_gallery_site A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=delet… CWE-89
SQL Injection 		CVE-2024-8336 2024-09-5 01:11 2024-08-30 Show GitHub Exploit DB Packet Storm
312775 - - - A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo,… - CVE-2024-44820 2024-09-5 01:09 2024-09-5 Show GitHub Exploit DB Packet Storm
312776 6.1 MEDIUM
Network 		cdevroe unmark unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php. CWE-79
Cross-site Scripting 		CVE-2024-41349 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm
312777 9.8 CRITICAL
Network 		organizr organizr Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php. CWE-89
SQL Injection 		CVE-2024-41372 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm
312778 6.1 MEDIUM
Network 		organizr organizr Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php. CWE-79
Cross-site Scripting 		CVE-2024-41371 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm
312779 9.8 CRITICAL
Network 		organizr organizr Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php. CWE-89
SQL Injection 		CVE-2024-41370 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm
312780 6.1 MEDIUM
Network 		phpipam phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php. CWE-79
Cross-site Scripting 		CVE-2024-41358 2024-09-5 01:07 2024-08-30 Show GitHub Exploit DB Packet Storm