Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2311	8.1	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性	CWE-297 ホストの不一致による証明書の不適切な検証	CVE-2026-22747	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2312	6.5	警告 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-22748	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2313	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-22753	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2314	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22754	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2315	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23344	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2316	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23345	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2317	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23346	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2318	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23347	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2319	4.7	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-23348	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2320	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-23349	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314041	5.9	MEDIUM Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.…	CWE-311 Missing Encryption of Sensitive Data	CVE-2024-39746	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314042	7.5	HIGH Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2024-39745	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314043	4.3	MEDIUM Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted fro…	CWE-352 Origin Validation Error	CVE-2024-39744	2024-08-24 00:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

314044	5.3	MEDIUM Network	youdiancms	youdiancms	A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to informati…	NVD-CWE-noinfo	CVE-2024-7328	2024-08-24 00:25	2024-08-1	Show	GitHub Exploit DB Packet Storm

314045	5.4	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due…	CWE-79 Cross-site Scripting	CVE-2024-20443	2024-08-24 00:18	2024-08-8	Show	GitHub Exploit DB Packet Storm

314046	4.8	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due…	CWE-79 Cross-site Scripting	CVE-2024-20479	2024-08-24 00:14	2024-08-8	Show	GitHub Exploit DB Packet Storm

314047	5.3	MEDIUM Network	hp	instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results…	NVD-CWE-noinfo	CVE-2024-42396	2024-08-24 00:07	2024-08-7	Show	GitHub Exploit DB Packet Storm

314048	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42400	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

314049	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42399	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

314050	5.3	MEDIUM Network	arubanetworks hp	arubaos instantos	Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to…	NVD-CWE-noinfo	CVE-2024-42398	2024-08-24 00:06	2024-08-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed