Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1531	5.4	警告 Network	xibosignage	xibo	xibosignageのxiboにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-31953	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

1532	4.9	警告 Network	xibosignage	xibo	xibosignageのxiboにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-31955	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

1533	4.3	警告 Network	xibosignage	xibo	xibosignageのxiboにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-31956	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

1534	8.8	重要 Network	マイクロソフト	Azure Logic Apps	Azure Logic Apps の特権昇格の脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-32171	2026-04-30 12:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

1535	7.5	重要 Network	getkirby	kirby	getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2026-32870	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

1536	9.8	緊急 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33076	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

1537	7.5	重要 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33077	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

1538	9.8	緊急 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-33078	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

1539	8.8	重要 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-33208	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

1540	7.5	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33254	2026-04-30 12:30	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313121	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a problem, which boils down to NULL vs IS_ERR inconsistent error handling in io_all…	CWE-476 NULL Pointer Dereference	CVE-2024-42254	2024-09-6 22:40	2024-08-8	Show	GitHub Exploit DB Packet Storm

313122	4.7	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ensure that `i2c_lock' is held when setting interrupt latch and mask in pca95…	CWE-667 Improper Locking	CVE-2024-42253	2024-09-6 22:38	2024-08-8	Show	GitHub Exploit DB Packet Storm

313123	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON() For reference, this has …	CWE-617 Reachable Assertion	CVE-2024-42252	2024-09-6 22:37	2024-08-8	Show	GitHub Exploit DB Packet Storm

313124	9.1	CRITICAL Network	huawei	emui harmonyos	Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.	CWE-22 Path Traversal	CVE-2024-45443	2024-09-6 22:33	2024-09-4	Show	GitHub Exploit DB Packet Storm

313125	4.3	MEDIUM Network	salesagility	suitecrm	SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Ver…	NVD-CWE-Other	CVE-2024-45392	2024-09-6 22:24	2024-09-6	Show	GitHub Exploit DB Packet Storm

313126	6.1	MEDIUM Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.	CWE-79 Cross-site Scripting	CVE-2024-44728	2024-09-6 22:23	2024-09-6	Show	GitHub Exploit DB Packet Storm

313127	6.1	MEDIUM Network	1e	platform	The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. …	CWE-601 Open Redirect	CVE-2024-7211	2024-09-6 22:23	2024-08-2	Show	GitHub Exploit DB Packet Storm

313128	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cu…	CWE-617 Reachable Assertion	CVE-2024-42251	2024-09-6 22:21	2024-08-8	Show	GitHub Exploit DB Packet Storm

313129	9.8	CRITICAL Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.	CWE-89 SQL Injection	CVE-2024-44727	2024-09-6 22:15	2024-09-6	Show	GitHub Exploit DB Packet Storm

313130	9.1	CRITICAL Network	mindsdb	mindsdb	MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-24759	2024-09-6 22:06	2024-09-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed