Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1151 9.1 緊急
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-862
CWE-863
CVE-2026-5574 2026-05-7 12:00 2026-04-5 Show GitHub Exploit DB Packet Storm
1152 7.1 重要
Local 		レッドハット
Xiph.Org		 Red Hat Enterprise Linux
Theora 		レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-5673 2026-05-7 12:00 2026-04-6 Show GitHub Exploit DB Packet Storm
1153 9.8 緊急
Network 		Sipeed Picoclaw SipeedのPicoclawにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-6987 2026-05-7 12:00 2026-04-25 Show GitHub Exploit DB Packet Storm
1154 8.8 重要
Network 		Coze Coze Studio CozeのCoze Studioにおける複数の脆弱性 CWE-74
CWE-89
CVE-2026-7023 2026-05-7 12:00 2026-04-26 Show GitHub Exploit DB Packet Storm
1155 7.3 重要
Network 		ShadowCloneLabs Glutamate MCP Servers ShadowCloneLabsのGlutamate MCP Serversにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-7094 2026-05-7 12:00 2026-04-27 Show GitHub Exploit DB Packet Storm
1156 5.4 警告
Network 		helpy.io helpy helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40229 2026-05-7 12:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1157 5.4 警告
Network 		helpy.io helpy helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40230 2026-05-7 12:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1158 7.5 重要
Network 		Exim Development Exim Exim DevelopmentのEximにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-40684 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
1159 9.8 緊急
Network 		Exim Development Exim Exim DevelopmentのEximにおける複数の脆弱性 CWE-684
CWE-787
CVE-2026-40685 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
1160 5.3 警告
Network 		Exim Development Exim Exim DevelopmentのEximにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40686 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312741 6.5 MEDIUM
Network 		cybozu office Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access b… NVD-CWE-noinfo
CVE-2024-39817 2024-09-12 04:36 2024-08-6 Show GitHub Exploit DB Packet Storm
312742 9.8 CRITICAL
Network 		tenda i22_firmware A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is the function formApPortalWebAuth of the file /goform/apPortalAuth. The manipula… CWE-120
Classic Buffer Overflow 		CVE-2024-7585 2024-09-12 04:32 2024-08-8 Show GitHub Exploit DB Packet Storm
312743 9.8 CRITICAL
Network 		tenda i22_firmware A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the … CWE-120
Classic Buffer Overflow 		CVE-2024-7584 2024-09-12 04:25 2024-08-8 Show GitHub Exploit DB Packet Storm
312744 7.8 HIGH
Local 		jetbrains teamcity In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions CWE-276
Incorrect Default Permissions  		CVE-2024-43114 2024-09-12 04:11 2024-08-6 Show GitHub Exploit DB Packet Storm
312745 5.5 MEDIUM
Local 		huawei emui
harmonyos 		LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-42034 2024-09-12 03:55 2024-08-8 Show GitHub Exploit DB Packet Storm
312746 7.8 HIGH
Local 		huawei harmonyos
emui 		Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality. NVD-CWE-noinfo
CVE-2024-42035 2024-09-12 03:52 2024-08-8 Show GitHub Exploit DB Packet Storm
312747 8.8 HIGH
Network 		pharmacy_management_system_project pharmacy_management_system A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The mani… CWE-89
SQL Injection 		CVE-2024-8147 2024-09-12 03:37 2024-08-25 Show GitHub Exploit DB Packet Storm
312748 5.5 MEDIUM
Local 		logitech options\+ Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera. CWE-863
 Incorrect Authorization 		CVE-2024-8011 2024-09-12 03:15 2024-08-25 Show GitHub Exploit DB Packet Storm
312749 5.3 MEDIUM
Network 		purevpn purevpn PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers. NVD-CWE-noinfo
CVE-2023-48957 2024-09-12 03:07 2024-08-26 Show GitHub Exploit DB Packet Storm
312750 5.4 MEDIUM
Network 		sap netweaver_application_server_abap SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by this server, the … NVD-CWE-noinfo
CVE-2024-41732 2024-09-12 02:52 2024-08-13 Show GitHub Exploit DB Packet Storm