Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2361 8.8 重要
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-23780 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2362 9.8 緊急
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-23781 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2363 7.5 重要
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-23782 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2364 9.9 緊急
Network 		Doorman Doorman Doormanにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-30269 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
2365 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33257 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2366 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33260 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2367 8.8 重要
Network 		litellm litellm LiteLLMにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル 		CVE-2026-40217 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2368 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40517 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2369 6.7 警告
Local 		The GnuPG Project Libgcrypt The GnuPG ProjectのLibgcryptにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-41989 2026-04-30 12:14 2026-04-23 Show GitHub Exploit DB Packet Storm
2370 9.8 緊急
Network 		OFFIS DCMTK OFFISのDCMTKにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5663 2026-04-30 12:14 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313711 9.8 CRITICAL
Network 		dlink di-8100g_firmware D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file CWE-77
Command Injection 		CVE-2024-44401 2024-09-13 01:09 2024-09-7 Show GitHub Exploit DB Packet Storm
313712 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() Fix a use-after-free that occurs in hcd when in_urb sent from… CWE-416
 Use After Free 		CVE-2023-52907 2024-09-13 01:06 2024-08-21 Show GitHub Exploit DB Packet Storm
313713 9.1 CRITICAL
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Several endpoints in versions prior to 4.2.1 of the CometVisu add-on of openHAB … CWE-862
 Missing Authorization 		CVE-2024-42470 2024-09-13 01:04 2024-08-12 Show GitHub Exploit DB Packet Storm
313714 9.8 CRITICAL
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authenti… CWE-22
Path Traversal 		CVE-2024-42469 2024-09-13 01:02 2024-08-12 Show GitHub Exploit DB Packet Storm
313715 7.5 HIGH
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated… CWE-22
Path Traversal 		CVE-2024-42468 2024-09-13 01:01 2024-08-12 Show GitHub Exploit DB Packet Storm
313716 6.1 MEDIUM
Network 		hyperview geoportal_toolkit HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will c… CWE-79
Cross-site Scripting 		CVE-2024-6450 2024-09-13 00:42 2024-08-28 Show GitHub Exploit DB Packet Storm
313717 - data_general
sgi
sun
hp
debian
ibm
bsdi 		dg_ux
irix
sunos
hp-ux
debian_linux
solaris
aix
bsd_os 		Buffer overflow in xlock program allows local users to execute commands as root. NVD-CWE-Other
CVE-1999-0038 2024-09-13 00:35 1997-04-26 Show GitHub Exploit DB Packet Storm
313718 6.5 MEDIUM
Network 		hyperview geoportal_toolkit HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. An unauthenticated remote attac… NVD-CWE-Other
CVE-2024-6449 2024-09-13 00:32 2024-08-28 Show GitHub Exploit DB Packet Storm
313719 - - - ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discovered in the implementation of the ESP-NOW group type message because there is n… CWE-125
Out-of-bounds Read 		CVE-2024-42484 2024-09-13 00:18 2024-09-13 Show GitHub Exploit DB Packet Storm
313720 7.5 HIGH
Network 		microfocus netiq_access_manager Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before … CWE-269
 Improper Privilege Management 		CVE-2024-4555 2024-09-13 00:13 2024-08-28 Show GitHub Exploit DB Packet Storm