Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1741	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31503	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

1742	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31504	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

1743	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31505	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

1744	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31506	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

1745	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31507	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

1746	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31508	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

1747	8.8	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-23780	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

1748	9.8	緊急 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-23781	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

1749	7.5	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-23782	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

1750	9.9	緊急 Network	Doorman	Doorman	Doormanにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-30269	2026-04-30 12:14	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313391	4.3	MEDIUM Network	majeedraza	carousel_slider	WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feature. While logged in to the WordPress site with Carousel Sl…	CWE-352 Origin Validation Error	CVE-2024-45270	2024-09-4 20:51	2024-09-2	Show	GitHub Exploit DB Packet Storm

313392	4.3	MEDIUM Network	majeedraza	carousel_slider	WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature. While logged in to the WordPress site with Carouse…	CWE-352 Origin Validation Error	CVE-2024-45269	2024-09-4 20:49	2024-09-2	Show	GitHub Exploit DB Packet Storm

313393	4.7	MEDIUM Network	code-projects	pharmacy_management_system	A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the compone…	CWE-79 Cross-site Scripting	CVE-2024-8366	2024-09-4 20:26	2024-09-1	Show	GitHub Exploit DB Packet Storm

313394	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7821	2024-09-4 19:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

313395	-		-	-	YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.	-	CVE-2024-41435	2024-09-4 06:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

313396	7.8	HIGH Local	automationanywhere	automation_360	A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload. NOTE: Automation Anywhere disputes this report, arg…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2024-41226	2024-09-4 06:15	2024-08-6	Show	GitHub Exploit DB Packet Storm

313397	9.8	CRITICAL Network	project_expense_monitoring_system_project	project_expense_monitoring_system	A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file printtransfer.php. The manipulation of the …	CWE-89 SQL Injection	CVE-2024-7937	2024-09-4 05:43	2024-08-20	Show	GitHub Exploit DB Packet Storm

313398	9.8	CRITICAL Network	project_expense_monitoring_system_project	project_expense_monitoring_system	A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affects an unknown part of the file transferred_report.php. The manipulation of the a…	CWE-89 SQL Injection	CVE-2024-7936	2024-09-4 05:43	2024-08-20	Show	GitHub Exploit DB Packet Storm

313399	5.4	MEDIUM Network	rems	leads_manager_tool	A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the ar…	CWE-79 Cross-site Scripting	CVE-2024-7942	2024-09-4 05:39	2024-08-20	Show	GitHub Exploit DB Packet Storm

313400	-		-	-	ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.	-	CVE-2024-41436	2024-09-4 05:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed