Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2331 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2026-31605 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2332 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31606 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2333 9.8 緊急
Network
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31608 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2334 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-31614 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2335 7.5 重要
Network
Tinyproxy project Tinyproxy Tinyproxy projectのTinyproxyにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-31842 2026-05-1 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
2336 8 重要
Network
マイクロソフト Microsoft Power Apps Microsoft Power Apps のリモートでコードが実行される脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-32172 2026-05-1 10:48 2026-04-23 Show GitHub Exploit DB Packet Storm
2337 7.1 重要
Local
マイクロソフト Microsoft Office
Microsoft Excel
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office Online Server
Microsoft Excel の情報漏えいの脆弱性 CWE-125
境界外読み取り
CVE-2026-32188 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
2338 7.8 重要
Local
マイクロソフト Microsoft Office
Microsoft Excel
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office Online Server
Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32189 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
2339 8.4 重要
Local
マイクロソフト Microsoft 365 Apps
Microsoft Office
Office Long Term Servicing Channel (LTSC)
Microsoft Office のリモート コードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32190 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
2340 7.8 重要
Local
マイクロソフト Microsoft 365 Apps
Office Long Term Servicing Channel (LTSC)
Microsoft Word のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33095 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313511 - - - The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execu… CWE-384
 Session Fixation
CVE-2024-45368 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
313512 - - - The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to ma… - CVE-2024-43099 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
313513 7.5 HIGH
Network
fastadmin fastadmin A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipula… CWE-22
Path Traversal
CVE-2024-7928 2024-09-14 06:33 2024-08-20 Show GitHub Exploit DB Packet Storm
313514 9.8 CRITICAL
Network
eyecix jobsearch_wp_job_board Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3. CWE-502
 Deserialization of Untrusted Data
CVE-2024-43931 2024-09-14 06:22 2024-08-30 Show GitHub Exploit DB Packet Storm
313515 5.4 MEDIUM
Network
qnap notes_station_3 A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We hav… CWE-79
Cross-site Scripting
CVE-2024-27122 2024-09-14 06:16 2024-09-7 Show GitHub Exploit DB Packet Storm
313516 5.3 MEDIUM
Network
- - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-40430 2024-09-14 06:15 2024-07-22 Show GitHub Exploit DB Packet Storm
313517 8.8 HIGH
Network
qnap qts
quts_hero
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTSclou… CWE-78
OS Command 
CVE-2023-34974 2024-09-14 06:14 2024-09-7 Show GitHub Exploit DB Packet Storm
313518 6.2 MEDIUM
Local
huawei emui
harmonyos
Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-42037 2024-09-14 06:13 2024-08-8 Show GitHub Exploit DB Packet Storm
313519 6.1 MEDIUM
Network
qnap qulog_center A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed t… CWE-79
Cross-site Scripting
CVE-2024-32762 2024-09-14 06:10 2024-09-7 Show GitHub Exploit DB Packet Storm
313520 7.5 HIGH
Network
huawei harmonyos
emui
Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-42036 2024-09-14 06:09 2024-08-8 Show GitHub Exploit DB Packet Storm