Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2071	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23778	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

2072	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23779	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

2073	4.3	警告 Network	Apache Software Foundation	Apache ActiveMQ ActiveMQ Web ActiveMQ Broker	Apache Software FoundationのApache ActiveMQ等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33227	2026-04-21 10:42	2026-04-7	Show	GitHub Exploit DB Packet Storm

2074	7.3	重要 Local	BeeWare	Briefcase	BeeWareのBriefcaseにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-33430	2026-04-21 10:42	2026-03-26	Show	GitHub Exploit DB Packet Storm

2075	7.8	重要 Local	マイクロソフト	Microsoft Defender Antimalware Platform	Microsoft Defender の特権の昇格の脆弱性	CWE-1220 アクセス制御の不十分な粒度	CVE-2026-33825	2026-04-21 10:42	2026-04-14	Show	GitHub Exploit DB Packet Storm

2076	7.8	重要 Local	linkingvision	RapidVMS	linkingvisionのRapidVMSにおけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-33847	2026-04-21 10:42	2026-03-24	Show	GitHub Exploit DB Packet Storm

2077	8.8	重要 Network	linkingvision	RapidVMS	linkingvisionのRapidVMSにおけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-33848	2026-04-21 10:42	2026-03-24	Show	GitHub Exploit DB Packet Storm

2078	8.8	重要 Network	linkingvision	RapidVMS	linkingvisionのRapidVMSにおけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-33849	2026-04-21 10:42	2026-03-24	Show	GitHub Exploit DB Packet Storm

2079	9.1	緊急 Network	Hydro System. PHU. Szafraniec M.	Control System	Hydro System. PHU. Szafraniec M.のControl Systemにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-34184	2026-04-21 10:42	2026-04-9	Show	GitHub Exploit DB Packet Storm

2080	8.8	重要 Network	Hydro System. PHU. Szafraniec M.	Control System	Hydro System. PHU. Szafraniec M.のControl SystemにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-34185	2026-04-21 10:42	2026-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291	5.3	MEDIUM Network	-	-	Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /api/notes/{id}, /api/… New	CWE-285 Improper Authorization	CVE-2026-41572	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

292	9.4	CRITICAL Network	-	-	Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt("null") placeholder whenever a user has no stored pas… New	CWE-287 Improper Authentication	CVE-2026-41571	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

293	7.5	HIGH Network	-	-	Easy PayPal Events & Tickets plugin for WordPress versions 1.3 and earlier contain an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticated attackers to en… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-41471	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

294	-		-	-	An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. New	-	CVE-2026-37459	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

295	8.8	HIGH Network	-	-	An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload. Update	CWE-611 XXE	CVE-2026-36765	2026-05-5 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

296	8.8	HIGH Network	-	-	An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary fi… Update	CWE-22 Path Traversal	CVE-2026-36762	2026-05-5 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

297	7.5	HIGH Network	-	-	Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue. New	CWE-126 Buffer Over-read	CVE-2026-34059	2026-05-5 03:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

298	5.3	MEDIUM Network	-	-	Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which f… New	CWE-125 CWE-170 Out-of-bounds Read Improper Null Termination	CVE-2026-34032	2026-05-5 03:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

299	5.3	MEDIUM Network	-	-	Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the… New	CWE-125 Out-of-bounds Read	CVE-2026-33857	2026-05-5 03:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

300	6.5	MEDIUM Network	-	-	HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are rec… New	CWE-443	CVE-2026-33523	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm