Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2341	8.8	重要 Adjacent	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 Firmwareにおける脆弱なパスワードの要求に関する脆弱性	CWE-521 脆弱なパスワードポリシー	CVE-2026-41038	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

2342	7.5	重要 Network	Quantum Networks	QN-I-470 Firmware	Quantum NetworksのQN-I-470 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41039	2026-05-8 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

2343	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42372	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

2344	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42373	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

2345	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-600L ファームウェア	D-Link CorporationのDIR-600L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42374	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

2346	8.8	重要 Adjacent	D-Link Systems, Inc.	DIR-600L ファームウェア	D-Link CorporationのDIR-600L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42375	2026-05-8 12:11	2026-05-4	Show	GitHub Exploit DB Packet Storm

2347	9.8	緊急 Network	MIYAGAWA (Tatsuhiko Miyagawa)	Plack::Middleware::Session::Cookie	MIYAGAWA (Tatsuhiko Miyagawa)のPlack::Middleware::Session::Cookieにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性	CWE-565 検証および完全性チェックを行っていない Cookie への依存	CVE-2014-125112	2026-05-8 12:11	2026-03-26	Show	GitHub Exploit DB Packet Storm

2348	7.5	重要 Network	Lobster DATA GmbH	Lobster_pro	Lobster DATA GmbHのLobster_proにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-13971	2026-05-8 12:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

2349	9.8	緊急 Network	D-Link Systems, Inc.	DIR-1253 Firmware	D-Link CorporationのDIR-1253 Firmwareにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2025-29165	2026-05-8 12:11	2026-03-5	Show	GitHub Exploit DB Packet Storm

2350	4.4	警告 Local	IBM	Planning Analytics Advanced Certified Containers	IBMのPlanning Analytics Advanced Certified Containersにおける複数の脆弱性	CWE-312 CWE-526	CVE-2025-36105	2026-05-8 12:11	2026-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1481	5.6	MEDIUM Network	-	-	Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.	CWE-840 Business Logic Errors	CVE-2026-41965	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1482	5.6	MEDIUM Network	-	-	Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	CWE-840 Business Logic Errors	CVE-2026-41966	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1483	5.9	MEDIUM Local	-	-	Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.	CWE-840 Business Logic Errors	CVE-2026-41967	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1484	5.9	MEDIUM Local	-	-	Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.	CWE-840 Business Logic Errors	CVE-2026-41968	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1485	6.2	MEDIUM Physics	-	-	Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	CWE-275 Permission Issues	CVE-2026-41969	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1486	6.8	MEDIUM Adjacent	-	-	Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.	CWE-787 Out-of-bounds Write	CVE-2026-41970	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1487	5.5	MEDIUM Local	-	-	Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.	CWE-840 Business Logic Errors	CVE-2026-41971	2026-05-15 23:08	2026-05-15	Show	GitHub Exploit DB Packet Storm

1488	8.3	HIGH Network	pyload-ng_project	pyload-ng	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates …	CWE-441 CWE-863 CWE-918 Confused Deputy Incorrect Authorization Server-Side Request Forgery (SSRF)	CVE-2026-42313	2026-05-15 23:04	2026-05-12	Show	GitHub Exploit DB Packet Storm

1489	6.7	MEDIUM Local	fortinet	fortiap fortiap-u fortiap-w2	An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5…	CWE-78 OS Command	CVE-2025-53680	2026-05-15 23:04	2026-05-13	Show	GitHub Exploit DB Packet Storm

1490	7.2	HIGH Network	fortinet	fortimail	An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5,…	CWE-89 SQL Injection	CVE-2025-53681	2026-05-15 23:04	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed