Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1521	8.2	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-40022	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1522	7.8	重要 Local	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40048	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1523	5.9	警告 Network	opentelemetry	opentelemetry	opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-40182	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

1524	9.9	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-40453	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1525	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40473	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1526	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40858	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1527	9.8	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40860	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1528	7.7	重要 Network	argoproj	Argo Workflows	Argo Project AuthorsのArgo Workflowsにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40886	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

1529	5.3	警告 Adjacent	opentelemetry	opentelemetry	opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-40891	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

1530	7.8	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40915	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313461	9.8	CRITICAL Network	angeljudesuarez	billing_system	A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql…	CWE-89 SQL Injection	CVE-2024-7839	2024-08-20 06:18	2024-08-16	Show	GitHub Exploit DB Packet Storm

313462	5.4	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin	CWE-79 Cross-site Scripting	CVE-2024-43810	2024-08-20 06:11	2024-08-17	Show	GitHub Exploit DB Packet Storm

313463	6.1	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page	CWE-79 Cross-site Scripting	CVE-2024-43809	2024-08-20 06:11	2024-08-17	Show	GitHub Exploit DB Packet Storm

313464	5.4	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin	CWE-79 Cross-site Scripting	CVE-2024-43808	2024-08-20 06:10	2024-08-17	Show	GitHub Exploit DB Packet Storm

313465	5.4	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page	CWE-79 Cross-site Scripting	CVE-2024-43807	2024-08-20 06:09	2024-08-17	Show	GitHub Exploit DB Packet Storm

313466	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_nat_table_init() accesses net->gen->ptr[…	CWE-476 NULL Pointer Dereference	CVE-2024-42269	2024-08-20 05:53	2024-08-17	Show	GitHub Exploit DB Packet Storm

313467	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload work, when remote host updates devlink on reload actions per…	CWE-667 Improper Locking	CVE-2024-42268	2024-08-20 05:52	2024-08-17	Show	GitHub Exploit DB Packet Storm

313468	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp extension If fetching of userspace memory fails during the main loop, all drm…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-42263	2024-08-20 05:41	2024-08-17	Show	GitHub Exploit DB Packet Storm

313469	-		-	-	In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execu…	-	CVE-2024-34743	2024-08-20 05:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313470	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7958	2024-08-20 05:15	2024-08-20	Show	GitHub Exploit DB Packet Storm