Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1351 6.6 警告
Local 		Saurabh Kumar python-dotenv Saurabh Kumarのpython-dotenvにおける複数の脆弱性 CWE-59
CWE-61
CVE-2026-28684 2026-04-28 10:11 2026-04-20 Show GitHub Exploit DB Packet Storm
1352 10 緊急
Network 		Smallstep Step CA SmallstepのStep CAにおける複数の脆弱性 CWE-287
CWE-295
CWE-295
CVE-2026-30836 2026-04-28 10:11 2026-03-19 Show GitHub Exploit DB Packet Storm
1353 4.7 警告
Local 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-32290 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1354 6.8 警告
Physics 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32291 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1355 7.5 重要
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-32292 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1356 3.7 低
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-32293 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1357 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Contracts オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34300 2026-04-28 10:11 2026-04-21 Show GitHub Exploit DB Packet Storm
1358 3.7 低
Network 		Smallstep Step CA SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40097 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1359 8.2 重要
Network 		Saltcorn Saltcorn Saltcornにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40163 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1360 6.1 警告
Network 		AdonisJS adonisjs/http-server
AdonisJS Core 		AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-40255 2026-04-28 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313501 - - - Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. - CVE-2024-34621 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313502 - - - Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. - CVE-2024-34620 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313503 - - - Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulner… - CVE-2024-34619 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313504 - - - Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information. - CVE-2024-34618 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313505 - - - Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. - CVE-2024-34617 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313506 - - - Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. - CVE-2024-34616 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313507 - - - Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. - CVE-2024-34615 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313508 - - - Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. - CVE-2024-34614 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313509 - - - Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. - CVE-2024-34613 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313510 - - - Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. - CVE-2024-34612 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm