Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1661 8.1 重要
Network 		OpenBSD OpenSSH OpenBSDのOpenSSHにおけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持 		CVE-2026-35385 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
1662 8.1 重要
Network 		OpenBSD OpenSSH OpenBSDのOpenSSHにおける不適切な動作順序に関する脆弱性 CWE-696
不適切な動作順序 		CVE-2026-35386 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
1663 6.5 警告
Network 		OpenBSD OpenSSH OpenBSDのOpenSSHにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装 		CVE-2026-35387 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
1664 2.5 低
Local 		OpenBSD OpenSSH OpenBSDのOpenSSHにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル 		CVE-2026-35388 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
1665 8.8 重要
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-35512 2026-04-28 10:12 2026-04-17 Show GitHub Exploit DB Packet Storm
1666 4.3 警告
Network 		Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおけるアクセス制御の不十分な粒度に関する脆弱性 CWE-1220
アクセス制御の不十分な粒度 		CVE-2026-38743 2026-04-28 10:12 2026-04-24 Show GitHub Exploit DB Packet Storm
1667 7.7 重要
Network 		Lee Peuker Movary Lee PeukerのMovaryにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40348 2026-04-28 10:12 2026-04-18 Show GitHub Exploit DB Packet Storm
1668 8.8 重要
Network 		Lee Peuker Movary Lee PeukerのMovaryにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40349 2026-04-28 10:12 2026-04-18 Show GitHub Exploit DB Packet Storm
1669 8.8 重要
Network 		Lee Peuker Movary Lee PeukerのMovaryにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40350 2026-04-28 10:12 2026-04-18 Show GitHub Exploit DB Packet Storm
1670 8.8 重要
Network 		Apache Software Foundation ActiveMQ Broker
Apache ActiveMQ 		Apache Software FoundationのApache ActiveMQ等の複数製品における複数の脆弱性 CWE-20
CWE-94
CVE-2026-40466 2026-04-28 10:12 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313621 5.5 MEDIUM
Local 		adobe bridge Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypa… CWE-125
Out-of-bounds Read 		CVE-2024-39387 2024-08-20 03:53 2024-08-15 Show GitHub Exploit DB Packet Storm
313622 7.8 HIGH
Local 		adobe bridge Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this … CWE-787
 Out-of-bounds Write 		CVE-2024-39386 2024-08-20 03:53 2024-08-15 Show GitHub Exploit DB Packet Storm
313623 9.8 CRITICAL
Network 		totolink ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected is the function setDefResponse of the file /www/cgi-bin/cstecgi.cgi. The manipulation … CWE-787
 Out-of-bounds Write 		CVE-2024-7908 2024-08-20 03:51 2024-08-19 Show GitHub Exploit DB Packet Storm
313624 7.2 HIGH
Network 		online_railway_reservation_system_project online_railway_reservation_system A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7910 2024-08-20 03:49 2024-08-19 Show GitHub Exploit DB Packet Storm
313625 9.8 CRITICAL
Network 		oretnom23 simple_online_bidding_system A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-7911 2024-08-20 03:48 2024-08-19 Show GitHub Exploit DB Packet Storm
313626 6.1 MEDIUM
Network 		pylonsproject webob WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected… CWE-601
Open Redirect 		CVE-2024-42353 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm
313627 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit th… CWE-476
 NULL Pointer Dereference 		CVE-2024-41866 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm
313628 7.8 HIGH
Local 		adobe dimension Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a m… CWE-426
 Untrusted Search Path 		CVE-2024-41865 2024-08-20 03:44 2024-08-15 Show GitHub Exploit DB Packet Storm
313629 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabi… CWE-125
Out-of-bounds Read 		CVE-2024-41854 2024-08-20 03:43 2024-08-15 Show GitHub Exploit DB Packet Storm
313630 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exp… CWE-787
 Out-of-bounds Write 		CVE-2024-41853 2024-08-20 03:42 2024-08-15 Show GitHub Exploit DB Packet Storm