Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2101	7.5	重要 Network	Mervin Praison (MervinPraison)	PraisonAI	Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性	CWE-22 CWE-59	CVE-2026-44340	2026-05-11 11:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

2102	7.8	重要 Local	ZTE	ZXCLOUD iRAI	ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2026-44406	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2103	7.5	重要 Network	Zcash Foundation	Zebrad	Zcash FoundationのZebradにおける計算の誤りに関する脆弱性	CWE-682 計算の誤り	CVE-2026-44498	2026-05-11 11:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

2104	5.3	警告 Network	Zcash Foundation	zebra-network Zebra-chain Zebrad	Zcash FoundationのZebra-chain等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-44500	2026-05-11 11:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

2105	7.5	重要 Network	The Tor Project	Tor	The Tor ProjectのTorにおける単一、固有のアクションの実施に関する脆弱性	CWE-837 単一、固有のアクションの不適切な実施	CVE-2026-44601	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2106	7.5	重要 Network	The Tor Project	Tor	The Tor ProjectのTorにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-44602	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2107	5.5	警告 Local	Open Source Geospatial Foundation	GDAL	Open Source Geospatial FoundationのGDALにおける複数の脆弱性	CWE-119 CWE-125	CVE-2026-8084	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2108	7.8	重要 Local	Open Source Geospatial Foundation	GDAL	Open Source Geospatial FoundationのGDALにおける複数の脆弱性	CWE-119 CWE-122	CVE-2026-8086	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2109	7.8	重要 Local	Open Source Geospatial Foundation	GDAL	Open Source Geospatial FoundationのGDALにおける複数の脆弱性	CWE-119 CWE-122	CVE-2026-8087	2026-05-11 11:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

2110	5.5	警告 Local	Open Source Geospatial Foundation	GDAL	Open Source Geospatial FoundationのGDALにおける複数の脆弱性	CWE-119 CWE-125	CVE-2026-8088	2026-05-11 11:03	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312181	7.1	HIGH Local	microsoft	azure_monitor_agent	Azure Monitor Agent Elevation of Privilege Vulnerability	NVD-CWE-noinfo	CVE-2024-38097	2024-10-17 04:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

312182	6.1	MEDIUM Network	microchip	timeprovider_4100_firmware	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This…	CWE-79 Cross-site Scripting	CVE-2024-43687	2024-10-17 04:28	2024-10-5	Show	GitHub Exploit DB Packet Storm

312183	7.5	HIGH Network	microsoft	windows_server_2022_23h2	Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-38029	2024-10-17 04:27	2024-10-9	Show	GitHub Exploit DB Packet Storm

312184	6.1	MEDIUM Network	microchip	timeprovider_4100_firmware	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects Ti…	CWE-79 Cross-site Scripting	CVE-2024-43686	2024-10-17 04:20	2024-10-5	Show	GitHub Exploit DB Packet Storm

312185	8.2	HIGH Network	cacti	cacti	Cacti is an open source performance and fault management framework. The`consolenewsection` parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewse…	CWE-79 Cross-site Scripting	CVE-2024-43365	2024-10-17 04:15	2024-10-8	Show	GitHub Exploit DB Packet Storm

312186	8.8	HIGH Network	phpoffice	phpspreadsheet	PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images h…	CWE-22 CWE-918 Path Traversal Server-Side Request Forgery (SSRF)	CVE-2024-45291	2024-10-17 04:09	2024-10-8	Show	GitHub Exploit DB Packet Storm

312187	5.3	MEDIUM Network	php-fpm	php-fpm	In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being proce…	NVD-CWE-noinfo	CVE-2024-8925	2024-10-17 03:53	2024-10-8	Show	GitHub Exploit DB Packet Storm

312188	-		-	-	SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component.	-	CVE-2024-46532	2024-10-17 03:35	2024-10-12	Show	GitHub Exploit DB Packet Storm

312189	8.8	HIGH Network	php-fpm	php-fpm	In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for CVE-2024-4577 https://github.com/a…	CWE-78 OS Command	CVE-2024-8926	2024-10-17 03:35	2024-10-8	Show	GitHub Exploit DB Packet Storm

312190	3.3	LOW Local	php-fpm	php-fpm	In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output = yes, it may be possi…	NVD-CWE-Other	CVE-2024-9026	2024-10-17 03:30	2024-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed