Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1421	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-33524	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

1422	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33666	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

1423	7.5	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35064	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

1424	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35170	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

1425	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35176	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

1426	6.5	警告 Network	Coder	Code Extension Marketplace	CoderのCode Extension Marketplaceにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35454	2026-04-30 12:07	2026-04-6	Show	GitHub Exploit DB Packet Storm

1427	9.8	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-35503	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

1428	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-39462	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

1429	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31509	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

1430	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31510	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313451	-		-	-	AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path", allowing Administra…	-	CVE-2024-6451	2024-08-20 02:35	2024-08-19	Show	GitHub Exploit DB Packet Storm

313452	9.8	CRITICAL Network	oretnom23	clinic\'s_patient_management_system	A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /new_prescr…	CWE-89 SQL Injection	CVE-2024-7494	2024-08-20 02:34	2024-08-6	Show	GitHub Exploit DB Packet Storm

313453	8.8	HIGH Network	opentext	arcsight_intelligence	Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.	CWE-863 Incorrect Authorization	CVE-2024-6358	2024-08-20 02:31	2024-08-6	Show	GitHub Exploit DB Packet Storm

313454	9.8	CRITICAL Network	opentext	arcsight_intelligence	Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.	NVD-CWE-noinfo	CVE-2024-6359	2024-08-20 02:30	2024-08-6	Show	GitHub Exploit DB Packet Storm

313455	8.8	HIGH Network	opentext	arcsight_intelligence	Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-6357	2024-08-20 02:23	2024-08-6	Show	GitHub Exploit DB Packet Storm

313456	6.1	MEDIUM Network	calibre-ebook	calibre	Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2024-7008	2024-08-20 02:19	2024-08-6	Show	GitHub Exploit DB Packet Storm

313457	7.1	HIGH Network	calibre-ebook	calibre	Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.	CWE-89 SQL Injection	CVE-2024-7009	2024-08-20 02:18	2024-08-6	Show	GitHub Exploit DB Packet Storm

313458	7.5	HIGH Network	calibre-ebook	calibre	Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.	CWE-22 Path Traversal	CVE-2024-6781	2024-08-20 02:15	2024-08-6	Show	GitHub Exploit DB Packet Storm

313459	7.5	HIGH Network	dell	alienware_update update command_update	Dell Command \| Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access coul…	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2024-28962	2024-08-20 02:12	2024-08-6	Show	GitHub Exploit DB Packet Storm

313460	9.8	CRITICAL Network	itsourcecode	laravel_accounting_system	A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manip…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7495	2024-08-20 02:10	2024-08-6	Show	GitHub Exploit DB Packet Storm