Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2151 5.9 警告
Network
マイクロソフト Microsoft .NET Framework .NET Framework のサービス拒否の脆弱性 CWE-362
競合状態
CVE-2026-32226 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2152 8.8 重要
Network
Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-3288 2026-05-8 12:23 2026-03-9 Show GitHub Exploit DB Packet Storm
2153 7.5 重要
Network
マイクロソフト Microsoft .NET Framework
.NET
.NET、.NET Framework、Visual Studio のサービス拒否の脆弱性 CWE-20
CWE-400
CWE-835
CVE-2026-33116 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2154 8.8 重要
Network
マイクロソフト SQL Server 2016
SQL Server 2017
SQL Server 2022
SQL Server 2019
SQL Server 2025
Microsoft SQL Server のリモート コードが実行される脆弱性 CWE-822
信頼性のないポインタデリファレンス
CVE-2026-33120 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2155 5.9 警告
Network
Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおける複数の脆弱性 CWE-295
CWE-297
CVE-2026-34477 2026-05-8 12:23 2026-04-10 Show GitHub Exploit DB Packet Storm
2156 7.5 重要
Network
Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2026-34479 2026-05-8 12:23 2026-04-10 Show GitHub Exploit DB Packet Storm
2157 7.4 重要
Network
GNU Project
レッドハット
Red Hat Hardened Images
Red Hat Enterprise Linux
Red Hat OpenShift Container Platform
GnuTLS
GNU Project等の複数ベンダの製品における大文字と小文字の区別の不適切な処理に関する脆弱性 CWE-178
大文字と小文字の区別の不適切な処理
CVE-2026-3833 2026-05-8 12:23 2026-04-30 Show GitHub Exploit DB Packet Storm
2158 9.1 緊急
Network
Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおけるセッションの固定化の脆弱性 CWE-384
CWE-384
CVE-2026-40010 2026-05-8 12:23 2026-05-6 Show GitHub Exploit DB Packet Storm
2159 9.1 緊急
Network
Apache Software Foundation Apache OpenNLP Apache Software FoundationのApache OpenNLPにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-40682 2026-05-8 12:23 2026-05-4 Show GitHub Exploit DB Packet Storm
2160 9.8 緊急
Network
Apache Software Foundation Apache OpenNLP Apache Software FoundationのApache OpenNLPにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用
CVE-2026-42027 2026-05-8 12:23 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312481 7.5 HIGH
Network
ays-pro chatgpt_assistant The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and … NVD-CWE-noinfo
CVE-2024-7714 2024-10-7 23:21 2024-09-27 Show GitHub Exploit DB Packet Storm
312482 6.1 MEDIUM
Network
honeywell iq3xcite_firmware A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting
CVE-2024-46453 2024-10-7 22:53 2024-09-28 Show GitHub Exploit DB Packet Storm
312483 6.1 MEDIUM
Network
filamentphp filament Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values pass… CWE-79
Cross-site Scripting
CVE-2024-47186 2024-10-7 22:30 2024-09-28 Show GitHub Exploit DB Packet Storm
312484 7.5 HIGH
Network
netflix e2nest A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a CWE-22
Path Traversal
CVE-2024-9301 2024-10-7 22:12 2024-09-28 Show GitHub Exploit DB Packet Storm
312485 5.4 MEDIUM
Network
blockspare blockspare The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress… CWE-79
Cross-site Scripting
CVE-2024-8325 2024-10-7 21:37 2024-09-4 Show GitHub Exploit DB Packet Storm
312486 7.5 HIGH
Network
pixelyoursite pixelyoursite The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 a… CWE-287
Improper Authentication
CVE-2024-7870 2024-10-7 21:29 2024-09-4 Show GitHub Exploit DB Packet Storm
312487 - - - In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed fo… - CVE-2024-20094 2024-10-7 13:15 2024-10-7 Show GitHub Exploit DB Packet Storm
312488 - - - In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction i… - CVE-2024-20103 2024-10-7 12:15 2024-10-7 Show GitHub Exploit DB Packet Storm
312489 - - - In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is … - CVE-2024-20101 2024-10-7 12:15 2024-10-7 Show GitHub Exploit DB Packet Storm
312490 - - - In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is … - CVE-2024-20100 2024-10-7 12:15 2024-10-7 Show GitHub Exploit DB Packet Storm