Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2241 9.8 緊急
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-43037 2026-05-7 11:25 2026-05-1 Show GitHub Exploit DB Packet Storm
2242 9.8 緊急
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける根本の脆弱性による認証回避の脆弱性 CWE-305
根本の脆弱性による認証回避 		CVE-2026-4670 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
2243 8.8 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-5174 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
2244 6.5 警告
Network 		GNU Project GNU C Library GNU ProjectのGNU C Libraryにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-6238 2026-05-7 11:25 2026-04-28 Show GitHub Exploit DB Packet Storm
2245 8.1 重要
Network 		langflow langflow langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-6542 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
2246 6.5 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6706 2026-05-7 11:25 2026-04-28 Show GitHub Exploit DB Packet Storm
2247 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-7422 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
2248 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-7423 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
2249 8.1 重要
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-7424 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
2250 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-7425 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313431 5.4 MEDIUM
Network 		cpothemes allegiant Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-43329 2024-09-18 04:59 2024-08-18 Show GitHub Exploit DB Packet Storm
313432 6.1 MEDIUM
Network 		wpbeaveraddons powerpack_lite_for_beaver_builder Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects Pow… CWE-79
Cross-site Scripting 		CVE-2024-43330 2024-09-18 04:53 2024-08-18 Show GitHub Exploit DB Packet Storm
313433 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ES… CWE-908
 Use of Uninitialized Resource 		CVE-2024-7526 2024-09-18 04:15 2024-08-6 Show GitHub Exploit DB Packet Storm
313434 5.4 MEDIUM
Network 		mayurik best_house_rental_management_system A vulnerability classified as problematic has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /index.php?page=tenants of the componen… CWE-79
Cross-site Scripting 		CVE-2024-8610 2024-09-18 03:48 2024-09-10 Show GitHub Exploit DB Packet Storm
313435 9.8 CRITICAL
Network 		dlink dir-x4860_firmware The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execu… CWE-787
 Out-of-bounds Write 		CVE-2024-45695 2024-09-18 03:40 2024-09-16 Show GitHub Exploit DB Packet Storm
313436 9.8 CRITICAL
Network 		dlink dir-x5460_firmware
dir-x4860_firmware 		The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execu… CWE-121
Stack-based Buffer Overflow 		CVE-2024-45694 2024-09-18 03:40 2024-09-16 Show GitHub Exploit DB Packet Storm
313437 - - - Rejected reason: This CVE is a duplicate of another CVE. - CVE-2024-45804 2024-09-18 03:15 2024-09-18 Show GitHub Exploit DB Packet Storm
313438 6.5 MEDIUM
Network 		bitapps bit_form Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4. NVD-CWE-noinfo
CVE-2024-43251 2024-09-18 03:10 2024-08-27 Show GitHub Exploit DB Packet Storm
313439 9.6 CRITICAL
Network 		joplin_project joplin Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to d… CWE-79
Cross-site Scripting 		CVE-2024-40643 2024-09-18 03:03 2024-09-10 Show GitHub Exploit DB Packet Storm
313440 6.5 MEDIUM
Network 		techexcel back_office_software This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulne… CWE-863
 Incorrect Authorization 		CVE-2024-8601 2024-09-18 02:54 2024-09-9 Show GitHub Exploit DB Packet Storm