Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2021	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7357	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2022	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7358	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2023	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7359	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2024	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-7360	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2025	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7361	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2026	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7363	2026-05-1 10:40	2026-04-28	Show	GitHub Exploit DB Packet Storm

2027	4.3	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2025-59031	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

2028	5.3	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-0394	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

2029	8.2	重要 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-24031	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

2030	5.9	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるCapture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2026-27855	2026-05-1 10:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313221	5.5	MEDIUM Local	adobe	audition	Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…	CWE-125 Out-of-bounds Read	CVE-2024-41868	2024-09-19 04:13	2024-09-12	Show	GitHub Exploit DB Packet Storm

313222	6.1	MEDIUM Network	mayurik	best_house_rental_management_system	A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file categories.php. The manip…	CWE-79 Cross-site Scripting	CVE-2024-8708	2024-09-19 04:11	2024-09-12	Show	GitHub Exploit DB Packet Storm

313223	6.5	MEDIUM Network	microsoft	edge	Microsoft Edge (Chromium-based) Information Disclosure Vulnerability	NVD-CWE-noinfo	CVE-2024-38222	2024-09-19 04:01	2024-09-12	Show	GitHub Exploit DB Packet Storm

313224	7.3	HIGH Local	cisco	meraki_systems_manager	A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with elevated privileges.  This vulnerability is …	CWE-427 Uncontrolled Search Path Element	CVE-2024-20430	2024-09-19 03:56	2024-09-13	Show	GitHub Exploit DB Packet Storm

313225	8.8	HIGH Network	owasp	defectdojo	An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.	NVD-CWE-Other	CVE-2023-48171	2024-09-19 03:54	2024-08-13	Show	GitHub Exploit DB Packet Storm

313226	7.5	HIGH Network	i-doit	i-doit	SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cm…	CWE-89 SQL Injection	CVE-2024-8749	2024-09-19 03:53	2024-09-12	Show	GitHub Exploit DB Packet Storm

313227	8.8	HIGH Network	sir	gnuboard	Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.	CWE-346 Origin Validation Error	CVE-2024-41475	2024-09-19 03:51	2024-08-13	Show	GitHub Exploit DB Packet Storm

313228	9.8	CRITICAL Network	soplanning	soplanning	An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulne…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-27113	2024-09-19 03:43	2024-09-11	Show	GitHub Exploit DB Packet Storm

313229	9.8	CRITICAL Network	soplanning	soplanning	A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying d…	CWE-89 SQL Injection	CVE-2024-27112	2024-09-19 03:42	2024-09-11	Show	GitHub Exploit DB Packet Storm

313230	9.8	CRITICAL Network	agpt	autogpt	A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific com…	CWE-78 OS Command	CVE-2024-6091	2024-09-19 03:41	2024-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed