Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1691 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1839 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
1692 6.1 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20059 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1693 4.7 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-20060 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1694 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-20061 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1695 6.5 警告
Local 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-20064 2026-04-30 12:17 2026-03-4 Show GitHub Exploit DB Packet Storm
1696 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-20078 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1697 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-20081 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1698 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-22761 2026-04-30 12:17 2026-04-20 Show GitHub Exploit DB Packet Storm
1699 9.1 緊急
Network 		GNOME Project libsoup GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-2369 2026-04-30 12:17 2026-03-19 Show GitHub Exploit DB Packet Storm
1700 9.6 緊急
Network 		マイクロソフト Microsoft Partner Center Microsoft パートナー センターの特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-24303 2026-04-30 12:17 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313521 - - - JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.c… - CVE-2024-43033 2024-08-23 01:35 2024-08-22 Show GitHub Exploit DB Packet Storm
313522 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf fo… CWE-129
 Improper Validation of Array Index 		CVE-2024-42301 2024-08-23 01:31 2024-08-17 Show GitHub Exploit DB Packet Storm
313523 - - - memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set … - CVE-2024-41659 2024-08-23 01:15 2024-08-21 Show GitHub Exploit DB Packet Storm
313524 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after free with vdec_close(). The firmware will… CWE-416
 Use After Free 		CVE-2024-42313 2024-08-23 01:01 2024-08-17 Show GitHub Exploit DB Packet Storm
313525 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_get_modes(), the return value of drm_mode_… CWE-476
 NULL Pointer Dereference 		CVE-2024-42310 2024-08-23 01:01 2024-08-17 Show GitHub Exploit DB Packet Storm
313526 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_get_modes(), the return value of drm_mode_… CWE-476
 NULL Pointer Dereference 		CVE-2024-42309 2024-08-23 01:01 2024-08-17 Show GitHub Exploit DB Packet Storm
313527 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix div-by-zero in vmpressure_calc_level() evict_folios() uses a second pass to reclaim folios that have gone through p… CWE-369
 Divide By Zero 		CVE-2024-42316 2024-08-23 00:52 2024-08-17 Show GitHub Exploit DB Packet Storm
313528 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on __exfat_get_dentry_set When accessing a file with more entries than ES_MAX_ENTRY_NUM, the bh-arr… CWE-667
 Improper Locking 		CVE-2024-42315 2024-08-23 00:51 2024-08-17 Show GitHub Exploit DB Packet Storm
313529 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT When loading a EXT program without specifying `att… CWE-476
 NULL Pointer Dereference 		CVE-2024-43837 2024-08-23 00:44 2024-08-17 Show GitHub Exploit DB Packet Storm
313530 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one… CWE-476
 NULL Pointer Dereference 		CVE-2024-43836 2024-08-23 00:43 2024-08-17 Show GitHub Exploit DB Packet Storm