Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1591 7.4 重要
Network 		go-git project go-git go-git projectのgo-gitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41506 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
1592 8.1 重要
Network 		Andreas Kloeckner RELATE Andreas KloecknerのRELATEにおける複数の脆弱性 CWE-203
CWE-208
CVE-2026-41588 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
1593 8.8 重要
Network 		NocoBase NocoBase NocoBaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-41640 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
1594 6.1 警告
Network 		fast-xml-parser project fast-xml-parser Natural Intelligenceのfast-xml-parserにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-41650 2026-05-14 10:18 2026-05-7 Show GitHub Exploit DB Packet Storm
1595 4.4 警告
Local 		Anthropic PBC Claude SDK for TypeScript (anthropic-ai/sdk) Anthropic PBCのClaude SDK for TypeScript (anthropic-ai/sdk)における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-41686 2026-05-14 10:18 2026-05-4 Show GitHub Exploit DB Packet Storm
1596 8.6 重要
Network 		VMware Spring AI VMwareのSpring AIにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化 		CVE-2026-41705 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
1597 7.5 重要
Network 		VMware Spring AI VMwareのSpring AIにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2026-41712 2026-05-14 10:18 2026-05-12 Show GitHub Exploit DB Packet Storm
1598 8.2 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-41713 2026-05-14 10:18 2026-05-12 Show GitHub Exploit DB Packet Storm
1599 6.5 警告
Network 		LangGenius Dify LangGeniusのDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41950 2026-05-14 10:18 2026-05-5 Show GitHub Exploit DB Packet Storm
1600 9.6 緊急
Network 		Streetwriters Notesnook Mobile
Notesnook Desktop 		StreetwritersのNotesnook Desktop等の複数製品における複数の脆弱性 CWE-79
CWE-94
CVE-2026-42090 2026-05-14 10:18 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311901 - - - An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing Engines (REs) are in u… - CVE-2024-47495 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311902 - - - An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management System v2002 to v2024 allows attackers to execute arbitrar… - CVE-2024-46088 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311903 - - - A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the Juno… CWE-77
Command Injection 		CVE-2024-39563 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311904 6.5 MEDIUM
Network 		- - An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker t… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-47508 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311905 5.8 MEDIUM
Network 		- - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based a… - CVE-2024-47507 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311906 5.9 MEDIUM
Network 		- - A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a… CWE-833
 Deadlock 		CVE-2024-47506 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311907 6.5 MEDIUM
Network 		- - An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker t… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-47505 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311908 7.5 HIGH
Network 		- - An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated, network based attacker to … CWE-1287
 Improper Validation of Specified Type of Input 		CVE-2024-47504 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311909 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33582 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
311910 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33581 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm