Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2311 5.4 警告
Network
Istio Istio Istioにおける複数の脆弱性 CWE-185
CWE-863
CVE-2026-39350 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2312 6.5 警告
Network
Project Jupyter nbconvert Project Jupyterのnbconvertにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-39377 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
2313 6.5 警告
Network
Project Jupyter nbconvert Project Jupyterのnbconvertにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-39378 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
2314 7.2 重要
Network
boidcms boidcms boidcmsにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン
CVE-2026-39387 2026-04-27 11:21 2026-04-14 Show GitHub Exploit DB Packet Storm
2315 9.9 緊急
Network
openremote openremote openremoteにおける複数の脆弱性 CWE-917
CWE-94
CVE-2026-39842 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2316 10 緊急
Network
Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-39861 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
2317 8.1 重要
Network
Suyog Sonwalkar MCP Server Kubernetes Suyog SonwalkarのMCP Server Kubernetesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-39884 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2318 6.5 警告
Network
jqlang jq jqlangのjqにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-39979 2026-04-27 11:21 2026-04-13 Show GitHub Exploit DB Packet Storm
2319 5.5 警告
Local
Linux Foundation Sigstore Timestamp Authority Linux FoundationのSigstore Timestamp Authorityにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-39984 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2320 7.1 重要
Network
lfprojects Zarf lfprojectsのZarfにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40090 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314131 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3 CWE-352
 Origin Validation Error
CVE-2024-42604 2024-08-22 05:35 2024-08-21 Show GitHub Exploit DB Packet Storm
314132 8.8 HIGH
Network
tamparongj_03 online_graduate_tracer_system A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetch_genderit.php.… CWE-89
SQL Injection
CVE-2024-7949 2024-08-22 04:15 2024-08-20 Show GitHub Exploit DB Packet Storm
314133 9.8 CRITICAL
Network
totolink ex1200l_firmware A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023 and classified as critical. Affected by this vulnerability is the function setLanguageCfg of the file /www/cgi-bin/cstecgi.cgi… CWE-787
 Out-of-bounds Write
CVE-2024-7909 2024-08-22 04:15 2024-08-19 Show GitHub Exploit DB Packet Storm
314134 9.8 CRITICAL
Network
ltcms ltcms A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component A… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-7743 2024-08-22 04:15 2024-08-14 Show GitHub Exploit DB Packet Storm
314135 9.8 CRITICAL
Network
ltcms ltcms A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-7742 2024-08-22 04:08 2024-08-14 Show GitHub Exploit DB Packet Storm
314136 5.3 MEDIUM
Network
ltcms ltcms A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The man… CWE-22
Path Traversal
CVE-2024-7741 2024-08-22 04:07 2024-08-14 Show GitHub Exploit DB Packet Storm
314137 9.8 CRITICAL
Network
ltcms ltcms A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. Th… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-7740 2024-08-22 04:06 2024-08-14 Show GitHub Exploit DB Packet Storm
314138 6.5 MEDIUM
Network
oretnom23 computer_laboratory_management_system Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete ca… NVD-CWE-noinfo
CVE-2024-41332 2024-08-22 03:53 2024-08-12 Show GitHub Exploit DB Packet Storm
314139 9.8 CRITICAL
Network
tenda fh1206_firmware A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manip… CWE-787
 Out-of-bounds Write
CVE-2024-7615 2024-08-22 03:48 2024-08-12 Show GitHub Exploit DB Packet Storm
314140 9.8 CRITICAL
Network
tenda fh1206_firmware A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument p… CWE-787
 Out-of-bounds Write
CVE-2024-7614 2024-08-22 03:48 2024-08-12 Show GitHub Exploit DB Packet Storm