Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1781	6.6	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40449	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

1782	6.6	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40450	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

1783	8.2	重要 Network	UltraDAG	UltraDAG	UltraDAGにおける複数の脆弱性	CWE-460 CWE-696	CVE-2026-40583	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

1784	7.5	重要 Network	RansomLook	RansomLook	RansomLookにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-40584	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

1785	5.6	警告 Local	Home Assistant Ecosystem	Home Assistant Command-line Interface (hass-cli)	Home Assistant EcosystemのHome Assistant Command-line Interface (hass-cli)における複数の脆弱性	CWE-1336 CWE-94	CVE-2026-40602	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

1786	5.5	警告 Local	Dayuan Jiang (DayuanJiang)	Next AI Draw.io	Dayuan Jiang (DayuanJiang)のNext AI Draw.ioにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40608	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

1787	8.1	重要 Network	Zcash Foundation	Zebra-consensus Zebrad	Zcash FoundationのZebra-consensus等の複数製品における誤った要素を使用した比較に関する脆弱性	CWE-1025 誤った要素を使用した比較	CVE-2026-40880	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

1788	7.5	重要 Network	Zcash Foundation	zebra-network Zebrad	Zcash Foundationのzebra-network等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40881	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

1789	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40888	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

1790	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40889	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313501	6.1	MEDIUM Network	-	-	The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insufficient input sanitiza…	CWE-79 Cross-site Scripting	CVE-2024-3886	2024-09-3 21:59	2024-08-31	Show	GitHub Exploit DB Packet Storm

313502	8.8	HIGH Network	-	-	The Attire theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.6 via deserialization of untrusted input. This makes it possible for authenticated attac…	CWE-502 Deserialization of Untrusted Data	CVE-2024-7435	2024-09-3 21:59	2024-08-31	Show	GitHub Exploit DB Packet Storm

313503	-		-	-	A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_area.php. The…	CWE-89 SQL Injection	CVE-2024-8344	2024-09-3 21:59	2024-08-31	Show	GitHub Exploit DB Packet Storm

313504	-		-	-	A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	-	CVE-2024-44918	2024-09-3 21:59	2024-08-31	Show	GitHub Exploit DB Packet Storm

313505	-		-	-	Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command executio…	-	CVE-2024-44916	2024-09-3 21:59	2024-08-31	Show	GitHub Exploit DB Packet Storm

313506	-		-	-	Rejected reason: REJECT DO NOT USE THIS CVE ID. ConsultIDs: CVE-2024-39771. Reason: This CVE ID is a reservation duplicate of CVE-2024-39771. Notes: All CVE users should reference CVE-2024-3977…	-	CVE-2024-41718	2024-09-3 20:15	2024-09-3	Show	GitHub Exploit DB Packet Storm

313507	5.5	MEDIUM Local	-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2022-48936	2024-08-31 15:15	2024-08-22	Show	GitHub Exploit DB Packet Storm

313508	6.6	MEDIUM Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-25562	2024-08-31 12:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

313509	3.3	LOW Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-24973	2024-08-31 12:39	2024-08-14	Show	GitHub Exploit DB Packet Storm

313510	7.8	HIGH Local	intel	oneapi_base_toolkit distribution_for_gdb	Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2024-23495	2024-08-31 12:38	2024-08-14	Show	GitHub Exploit DB Packet Storm