Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1801	5.9	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-5500	2026-04-30 12:24	2026-04-10	Show	GitHub Exploit DB Packet Storm

1802	8.1	重要 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-5501	2026-04-30 12:24	2026-04-10	Show	GitHub Exploit DB Packet Storm

1803	9.1	緊急 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-5503	2026-04-30 12:24	2026-04-9	Show	GitHub Exploit DB Packet Storm

1804	9	緊急 Network	craftycontrol	crafty controller	craftycontrolのcrafty controllerにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-5652	2026-04-30 12:24	2026-04-21	Show	GitHub Exploit DB Packet Storm

1805	7.5	重要 Network	HashiCorp	Vault	HashiCorpのVaultにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-5807	2026-04-30 12:24	2026-04-17	Show	GitHub Exploit DB Packet Storm

1806	7.1	重要 Local	radare	radare2	radareのradare2におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6940	2026-04-30 12:24	2026-04-23	Show	GitHub Exploit DB Packet Storm

1807	7.8	重要 Local	radare	radare2	radareのradare2における複数の脆弱性	CWE-22 CWE-59	CVE-2026-6941	2026-04-30 12:24	2026-04-23	Show	GitHub Exploit DB Packet Storm

1808	7.5	重要 Network	Sgbett	BSV Ruby SDK (bsv-sdk)	SgbettのBSV Ruby SDK (bsv-sdk)における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-40069	2026-04-30 12:18	2026-04-9	Show	GitHub Exploit DB Packet Storm

1809	5.3	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-40431	2026-04-30 12:18	2026-04-24	Show	GitHub Exploit DB Packet Storm

1810	9.8	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40620	2026-04-30 12:18	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313421	7.5	HIGH Network	tenda	fh1206_firmware	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the modino parameter in the fromPptpUserAdd function. This vulnerability allows attackers to cause a Denial of Service (DoS) v…	CWE-787 Out-of-bounds Write	CVE-2024-42987	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313422	9.8	CRITICAL Network	tenda	fh1206_firmware	An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2024-42978	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313423	7.5	HIGH Network	tenda	fh1201_firmware	Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (…	CWE-787 Out-of-bounds Write	CVE-2024-42948	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313424	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via in…	CWE-79 Cross-site Scripting	CVE-2024-44778	2024-09-4 03:34	2024-08-30	Show	GitHub Exploit DB Packet Storm

313425	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via …	CWE-79 Cross-site Scripting	CVE-2024-44779	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

313426	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injec…	CWE-79 Cross-site Scripting	CVE-2024-44777	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

313427	6.1	MEDIUM Network	vtiger	vtiger_crm	An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.	CWE-601 Open Redirect	CVE-2024-44776	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

313428	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44717	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

313429	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44716	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

313430	5.4	MEDIUM Network	dsgvo-for-wp	dsgvo_all_in_one_for_wp	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in…	CWE-79 Cross-site Scripting	CVE-2024-43964	2024-09-4 03:30	2024-08-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed