Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
11 9.1 緊急
Network 		CHORNY Apache::Session CHORNYのApache::Sessionにおける有効期限後または解放後のリソースの操作に関する脆弱性 New CWE-672
有効期限後または解放後のリソースの操作 		CVE-2013-10075 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
12 9.8 緊急
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおける複数の脆弱性 New CWE-502
CWE-918
CVE-2026-34084 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
13 5.4 警告
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35453 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
14 9.1 緊急
Network 		Zcash Foundation Zebra-script
Zebrad 		Zcash FoundationのZebra-script等の複数製品における呼び出し元による仕様の不適切な準拠に関する脆弱性 New CWE-573
呼び出し元による仕様の不適切な準拠 		CVE-2026-41583 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
15 6.5 警告
Network 		Zcash Foundation zebra-rpc
Zebrad 		Zcash Foundationのzebra-rpc等の複数製品における複数の脆弱性 New CWE-248
CWE-617
CVE-2026-41585 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
16 9.1 緊急
Network 		Zcash Foundation Zebra-script
Zebrad 		Zcash FoundationのZebra-script等の複数製品におけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証 		CVE-2026-44497 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
17 5.3 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける複数の脆弱性 New CWE-367
CWE-770
CVE-2025-69233 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
18 8.4 重要
Local 		デル data domain operating system
PowerProtect DP Series Appliance 		デルのdata domain operating system等の複数製品における弱い認証情報の使用に関する脆弱性 New CWE-1391
脆弱な認証情報の使用 		CVE-2026-23853 2026-05-11 11:12 2026-04-17 Show GitHub Exploit DB Packet Storm
19 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 New CWE-693
CWE-94
CVE-2026-24118 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
20 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 New CWE-693
CWE-94
CVE-2026-24120 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312461 7.8 HIGH
Local 		intel graphics_performance_analyzers Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-28046 2024-09-7 03:40 2024-08-14 Show GitHub Exploit DB Packet Storm
312462 5.5 MEDIUM
Local 		intel arc_a_graphics
iris_xe_graphics 		Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-28050 2024-09-7 03:38 2024-08-14 Show GitHub Exploit DB Packet Storm
312463 7.3 HIGH
Local 		intel oneapi_hpc_toolkit
trace_analyzer_and_collector 		Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-28172 2024-09-7 03:36 2024-08-14 Show GitHub Exploit DB Packet Storm
312464 7.3 HIGH
Local 		intel mpi_library
oneapi_hpc_toolkit 		Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-28876 2024-09-7 03:35 2024-08-14 Show GitHub Exploit DB Packet Storm
312465 9.8 CRITICAL
Network 		lopalopa music_management_system Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter. CWE-89
SQL Injection 		CVE-2024-42783 2024-09-7 03:31 2024-08-22 Show GitHub Exploit DB Packet Storm
312466 7.2 HIGH
Network 		ethyca fides Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering e… CWE-94
Code Injection 		CVE-2024-45053 2024-09-7 03:20 2024-09-5 Show GitHub Exploit DB Packet Storm
312467 5.3 MEDIUM
Network 		ethyca fides Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an… CWE-203
 Information Exposure Through Discrepancy 		CVE-2024-45052 2024-09-7 03:18 2024-09-5 Show GitHub Exploit DB Packet Storm
312468 7.5 HIGH
Network 		zyxel nebula_lte3301-plus_firmware
nebula_fwa505_firmware
nebula_fwa710_firmware
nebula_fwa510_firmware
wx5600-t0_firmware
wx3401-b0_firmware
wx3100-t0_firmware
scr50axe_firmware
px… 		A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) condition… CWE-120
Classic Buffer Overflow 		CVE-2024-5412 2024-09-7 03:07 2024-09-3 Show GitHub Exploit DB Packet Storm
312469 7.5 HIGH
Network 		transsion carlcare Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks. NVD-CWE-noinfo
CVE-2024-7697 2024-09-7 03:04 2024-08-12 Show GitHub Exploit DB Packet Storm
312470 8.8 HIGH
Local 		freebsd freebsd The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtio_scsi can exploi… CWE-909
 Missing Initialization of Resource 		CVE-2024-8178 2024-09-7 02:35 2024-09-5 Show GitHub Exploit DB Packet Storm