Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1251	5.9	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40966	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1252	8.6	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-40967	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1253	7.5	重要 Adjacent	VMware	Spring Boot	VMwareのSpring Bootにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-40972	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1254	7	重要 Local	VMware	Spring Boot	VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40973	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1255	7.5	重要 Network	VMware	Spring Boot	VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-40975	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1256	9.1	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40976	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1257	6.7	警告 Local	VMware	Spring Boot	VMwareのSpring Bootにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-40977	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1258	8.8	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-40978	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1259	6.1	警告 Local	VMware	Spring AI	VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40979	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

1260	6.5	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40980	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312861	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44717	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

312862	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44716	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

312863	5.4	MEDIUM Network	dsgvo-for-wp	dsgvo_all_in_one_for_wp	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in…	CWE-79 Cross-site Scripting	CVE-2024-43964	2024-09-4 03:30	2024-08-30	Show	GitHub Exploit DB Packet Storm

312864	5.4	MEDIUM Network	khoj	khoj	Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. The q parameter for the …	CWE-79 Cross-site Scripting	CVE-2024-43396	2024-09-4 03:19	2024-08-21	Show	GitHub Exploit DB Packet Storm

312865	-		-	-	Rejected reason: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evide…	-	CVE-2024-7619	2024-09-4 03:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

312866	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() If IORESOURCE_MEM is not provided …	CWE-476 NULL Pointer Dereference	CVE-2024-43823	2024-09-4 02:49	2024-08-17	Show	GitHub Exploit DB Packet Storm

312867	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() The value “-ENOMEM” was assigned to the loc…	CWE-476 NULL Pointer Dereference	CVE-2024-43822	2024-09-4 02:49	2024-08-17	Show	GitHub Exploit DB Packet Storm

312868	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fai…	CWE-476 NULL Pointer Dereference	CVE-2024-43821	2024-09-4 02:49	2024-08-17	Show	GitHub Exploit DB Packet Storm

312869	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() Instead of getting the epc_features fr…	CWE-476 NULL Pointer Dereference	CVE-2024-43824	2024-09-4 02:48	2024-08-17	Show	GitHub Exploit DB Packet Storm

312870	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_M…	CWE-476 NULL Pointer Dereference	CVE-2024-43819	2024-09-4 02:47	2024-08-17	Show	GitHub Exploit DB Packet Storm