Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2221	8.8	重要 Network	pyLoad	pyLoad	pyLoadにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-41133	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

2222	8.2	重要 Network	Minio Inc.	Minio	Minio Inc.のMinioにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-41145	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

2223	9.8	緊急 Network	JetBrains	Junie	JetBrainsのJunieにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41153	2026-04-30 12:27	2026-04-17	Show	GitHub Exploit DB Packet Storm

2224	8.1	重要 Network	Statamic	Statamic	Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-41175	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

2225	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41176	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

2226	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける複数の脆弱性	CWE-306 CWE-78	CVE-2026-41179	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

2227	9.9	緊急 Network	Froxlor	Froxlor	FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2026-41228	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

2228	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

2229	8.5	重要 Network	Froxlor	Froxlor	FroxlorにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-41230	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

2230	7.5	重要 Network	Froxlor	Froxlor	Froxlorにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41231	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313461	8.8	HIGH Network	qnap	qts quts_hero	An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTSclou…	CWE-78 OS Command	CVE-2023-34974	2024-09-14 06:14	2024-09-7	Show	GitHub Exploit DB Packet Storm

313462	6.2	MEDIUM Local	huawei	emui harmonyos	Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-42037	2024-09-14 06:13	2024-08-8	Show	GitHub Exploit DB Packet Storm

313463	6.1	MEDIUM Network	qnap	qulog_center	A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed t…	CWE-79 Cross-site Scripting	CVE-2024-32762	2024-09-14 06:10	2024-09-7	Show	GitHub Exploit DB Packet Storm

313464	7.5	HIGH Network	huawei	harmonyos emui	Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.	NVD-CWE-noinfo	CVE-2024-42036	2024-09-14 06:09	2024-08-8	Show	GitHub Exploit DB Packet Storm

313465	9.8	CRITICAL Network	wpwebelite	docket	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This iss…	CWE-89 SQL Injection	CVE-2024-43132	2024-09-14 06:07	2024-08-30	Show	GitHub Exploit DB Packet Storm

313466	4.8	MEDIUM Network	qnap	helpdesk	A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We h…	CWE-79 Cross-site Scripting	CVE-2024-27125	2024-09-14 06:06	2024-09-7	Show	GitHub Exploit DB Packet Storm

313467	7.2	HIGH Network	salonbookingsystem	salon_booking_system	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking s…	CWE-89 SQL Injection	CVE-2024-39658	2024-09-14 06:04	2024-08-30	Show	GitHub Exploit DB Packet Storm

313468	9.8	CRITICAL Network	e4jconnect	vikrentcar	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R.L. VikRentCar allows SQL Injection.This issue affects VikRentCar: from n/a through 1.4.0.	CWE-89 SQL Injection	CVE-2024-39653	2024-09-14 06:03	2024-08-30	Show	GitHub Exploit DB Packet Storm

313469	8.8	HIGH Network	roundupwp	registrations_for_the_events_calendar	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registra…	CWE-89 SQL Injection	CVE-2024-39638	2024-09-14 06:00	2024-08-30	Show	GitHub Exploit DB Packet Storm

313470	8.8	HIGH Network	pricelisto	great_restaurant_menu_wp	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PriceListo Best Restaurant Menu by PriceListo allows SQL Injection.This issue affects Best Restau…	CWE-89 SQL Injection	CVE-2024-38793	2024-09-14 05:57	2024-08-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed