Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1951 4.3 警告
Network 		Onyx Onyx Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42276 2026-05-14 10:18 2026-05-8 Show GitHub Exploit DB Packet Storm
1952 6.5 警告
Network 		Onyx Onyx Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42277 2026-05-14 10:18 2026-05-8 Show GitHub Exploit DB Packet Storm
1953 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42308 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
1954 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-42309 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
1955 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-42310 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
1956 8.1 重要
Network 		Grav CMS grav Grav CMSのgravにおける複数の脆弱性 CWE-269
CWE-285
CWE-639
CWE-837
CVE-2026-42609 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1957 6.5 警告
Network 		Grav CMS grav Grav CMSのgravにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-42610 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1958 8.9 重要
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42611 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1959 5.4 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42612 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1960 4.8 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42841 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311791 7.5 HIGH
Network 		anisha e-health_care_system A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/req_detail.php. The manipulation of the … CWE-89
SQL Injection 		CVE-2024-10808 2024-11-7 00:14 2024-11-5 Show GitHub Exploit DB Packet Storm
311792 4.8 MEDIUM
Network 		anujkumar hospital_management_system A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulatio… CWE-79
Cross-site Scripting 		CVE-2024-10807 2024-11-7 00:07 2024-11-5 Show GitHub Exploit DB Packet Storm
311793 4.8 MEDIUM
Network 		anujkumar hospital_management_system A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The m… CWE-79
Cross-site Scripting 		CVE-2024-10806 2024-11-7 00:06 2024-11-5 Show GitHub Exploit DB Packet Storm
311794 4.7 MEDIUM
Local 		cosmote what\'s_up A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown processing of the file gr/desquared/kmmsharedmo… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-10748 2024-11-7 00:06 2024-11-4 Show GitHub Exploit DB Packet Storm
311795 9.8 CRITICAL
Network 		codezips hospital_appointment_system A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulati… CWE-89
SQL Injection 		CVE-2024-10791 2024-11-7 00:05 2024-11-5 Show GitHub Exploit DB Packet Storm
311796 5.4 MEDIUM
Network 		phpgurukul online_shopping_portal A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/t… CWE-79
Cross-site Scripting 		CVE-2024-10768 2024-11-7 00:04 2024-11-5 Show GitHub Exploit DB Packet Storm
311797 8.1 HIGH
Network 		thinkadmin thinkadmin A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argum… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10749 2024-11-7 00:04 2024-11-4 Show GitHub Exploit DB Packet Storm
311798 9.8 CRITICAL
Network 		projectworlds travel_management_system SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields. CWE-89
SQL Injection 		CVE-2024-51327 2024-11-7 00:02 2024-11-5 Show GitHub Exploit DB Packet Storm
311799 7.5 HIGH
Network 		projectworlds travel_management_system SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php. CWE-89
SQL Injection 		CVE-2024-51326 2024-11-7 00:02 2024-11-5 Show GitHub Exploit DB Packet Storm
311800 5.3 MEDIUM
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. The load-language command expects a `lang` parameter from which it constructs the path of the localization file to load, of the for… CWE-22
Path Traversal 		CVE-2024-49760 2024-11-7 00:01 2024-10-25 Show GitHub Exploit DB Packet Storm