Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1691 3.7 低
Network 		Smallstep Step CA SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40097 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1692 8.2 重要
Network 		Saltcorn Saltcorn Saltcornにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40163 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1693 6.1 警告
Network 		AdonisJS adonisjs/http-server
AdonisJS Core 		AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-40255 2026-04-28 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
1694 9.3 緊急
Local 		MinecAnton209 NovumOS MinecAnton209のNovumOSにおける複数の脆弱性 CWE-20
CWE-269
CVE-2026-40317 2026-04-28 10:11 2026-04-18 Show GitHub Exploit DB Packet Storm
1695 9 緊急
Local 		MinecAnton209 NovumOS MinecAnton209のNovumOSにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-40572 2026-04-28 10:10 2026-04-18 Show GitHub Exploit DB Packet Storm
1696 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月23日） - - 2026-04-27 13:37 2026-04-24 Show GitHub Exploit DB Packet Storm
1697 7.8 重要
Local 		Giskard Giskard Giskardにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-40320 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1698 7.5 重要
Network 		monetr monetr monetrにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40481 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1699 5.5 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40515 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1700 6.3 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40516 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313631 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Ex… CWE-787
 Out-of-bounds Write 		CVE-2024-41852 2024-08-20 03:42 2024-08-15 Show GitHub Exploit DB Packet Storm
313632 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user… CWE-190
 Integer Overflow or Wraparound 		CVE-2024-41851 2024-08-20 03:41 2024-08-15 Show GitHub Exploit DB Packet Storm
313633 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exp… CWE-787
 Out-of-bounds Write 		CVE-2024-41850 2024-08-20 03:41 2024-08-15 Show GitHub Exploit DB Packet Storm
313634 5.5 MEDIUM
Local 		f5 big-ip_next_central_manager When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs.  Note: Software versions which hav… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-41719 2024-08-20 03:40 2024-08-15 Show GitHub Exploit DB Packet Storm
313635 7.5 HIGH
Network 		f5 big-ip_access_policy_manager
big-ip_advanced_firewall_manager
big-ip_advanced_web_application_firewall
big-ip_analytics
big-ip_application_acceleration_manager
big-ip_application_secur… 		When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: So… CWE-476
 NULL Pointer Dereference 		CVE-2024-41164 2024-08-20 03:39 2024-08-15 Show GitHub Exploit DB Packet Storm
313636 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VOID CODERS Void Elementor Post Grid Addon for Elementor Page builder allows PHP Local File Inclusion.T… CWE-22
Path Traversal 		CVE-2024-43281 2024-08-20 03:36 2024-08-20 Show GitHub Exploit DB Packet Storm
313637 - - - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1. CWE-601
Open Redirect 		CVE-2024-43280 2024-08-20 03:36 2024-08-20 Show GitHub Exploit DB Packet Storm
313638 - - - Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24. CWE-306
Missing Authentication for Critical Function 		CVE-2024-43272 2024-08-20 03:36 2024-08-20 Show GitHub Exploit DB Packet Storm
313639 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themelocation Woo Products Widgets For Elementor allows PHP Local File Inclusion.This issue affects Woo… CWE-22
Path Traversal 		CVE-2024-43271 2024-08-20 03:36 2024-08-20 Show GitHub Exploit DB Packet Storm
313640 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hamed Naderfar Compute Links allows PHP Remote File Inclusion.This issue affec… - CVE-2024-43261 2024-08-20 03:36 2024-08-20 Show GitHub Exploit DB Packet Storm