Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201	4.3	警告 Adjacent	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New	CWE-20 CWE-noinfo	CVE-2026-8005	2026-05-8 12:14	2026-05-6	Show	GitHub Exploit DB Packet Storm

202	9.1	緊急 Network	日立ヴァンタラ	Pentaho Data Integration and Analytics	日立ヴァンタラのPentaho Data Integration and Analyticsにおける認証の欠如に関する脆弱性 New	CWE-862 認証の欠如	CVE-2025-11158	2026-05-8 12:12	2026-03-10	Show	GitHub Exploit DB Packet Storm

203	7.8	重要 Local	Mobatek	MobaXterm	MobatekのMobaXtermにおける引用されない検索パスまたは要素に関する脆弱性 New	CWE-428 引用されない検索パスまたは要素	CVE-2026-25866	2026-05-8 12:12	2026-03-9	Show	GitHub Exploit DB Packet Storm

204	8.8	重要 Network	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 FirmwareにおけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-41036	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

205	8.8	重要 Adjacent	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 New	CWE-307 過度な認証試行の不適切な制限	CVE-2026-41037	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

206	8.8	重要 Adjacent	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 Firmwareにおける脆弱なパスワードの要求に関する脆弱性 New	CWE-521 脆弱なパスワードポリシー	CVE-2026-41038	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

207	7.5	重要 Network	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 New	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41039	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

208	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 New	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42372	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

209	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 New	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42373	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

210	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-600L ファームウェア	D-Link CorporationのDIR-600L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 New	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42374	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312521	6.1	MEDIUM Network	priority-software	priority	Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)	CWE-79 Cross-site Scripting	CVE-2024-41697	2024-09-4 05:19	2024-08-20	Show	GitHub Exploit DB Packet Storm

312522	7.5	HIGH Network	priority-software	priority	Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor	CWE-200 Information Exposure	CVE-2024-41698	2024-09-4 05:18	2024-08-20	Show	GitHub Exploit DB Packet Storm

312523	7.5	HIGH Network	priority-software	priority	Priority – CWE-552: Files or Directories Accessible to External Parties	CWE-552 Files or Directories Accessible to External Parties	CVE-2024-41699	2024-09-4 05:17	2024-08-20	Show	GitHub Exploit DB Packet Storm

312524	7.5	HIGH Network	mecodia	feripro	An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations …	NVD-CWE-Other	CVE-2024-41518	2024-09-4 05:15	2024-08-3	Show	GitHub Exploit DB Packet Storm

312525	-		-	-	An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php funct…	-	CVE-2024-42902	2024-09-4 04:40	2024-09-4	Show	GitHub Exploit DB Packet Storm

312526	-		-	-	The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (BMH) CRD allows the `userData`, `metaData`, and `networkData` for the provision…	-	CVE-2024-43803	2024-09-4 04:40	2024-09-4	Show	GitHub Exploit DB Packet Storm

312527	7.5	HIGH Network	barix	sip_client_firmware	Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor	CWE-200 Information Exposure	CVE-2024-41700	2024-09-4 04:37	2024-08-20	Show	GitHub Exploit DB Packet Storm

312528	7.5	HIGH Network	tenda	fh1201_firmware	Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS)…	CWE-787 Out-of-bounds Write	CVE-2024-42941	2024-09-4 04:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

312529	7.5	HIGH Network	tenda	fh1201_firmware	Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS…	CWE-787 Out-of-bounds Write	CVE-2024-42940	2024-09-4 04:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

312530	5.4	MEDIUM Network	mayurik	best_house_rental_management_system	A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via…	CWE-79 Cross-site Scripting	CVE-2024-40473	2024-09-4 04:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed