Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2401 7.5 重要
Network
libsndfile project libsndfile libsndfile projectのlibsndfileにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-37555 2026-05-7 12:06 2026-04-29 Show GitHub Exploit DB Packet Storm
2402 6.5 警告
Network
Grokability, Inc. Snipe-IT Grokability, Inc.のSnipe-ITにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2026-38533 2026-05-7 12:05 2026-04-14 Show GitHub Exploit DB Packet Storm
2403 7.5 重要
Network
Apache Software Foundation ActiveMQ Broker
Apache ActiveMQ
Apache Software FoundationのApache ActiveMQ等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-39304 2026-05-7 12:05 2026-04-10 Show GitHub Exploit DB Packet Storm
2404 6.5 警告
Network
OpenBao OpenBao OpenBaoにおける複数の脆弱性 CWE-400
CWE-674
CWE-770
CVE-2026-39396 2026-05-7 12:05 2026-04-21 Show GitHub Exploit DB Packet Storm
2405 7.8 重要
Local
FreeBSD FreeBSD FreeBSDにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-39457 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2406 10 緊急
Network
traefik traefik traefikにおける複数の脆弱性 CWE-290
CWE-306
CVE-2026-39858 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2407 7.2 重要
Network
Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale
Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-4048 2026-05-7 12:05 2026-04-20 Show GitHub Exploit DB Packet Storm
2408 7.8 重要
Local
radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-40499 2026-05-7 12:05 2026-04-15 Show GitHub Exploit DB Packet Storm
2409 7.3 重要
Network
Apache Software Foundation HttpClient Apache Software FoundationのHttpClientにおける認証の重要なステップの欠如に関する脆弱性 CWE-304
認証の重要なステップの欠如
CVE-2026-40542 2026-05-7 12:05 2026-04-22 Show GitHub Exploit DB Packet Storm
2410 9.1 緊急
Network
goshs goshs goshsにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-40903 2026-05-7 12:05 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313271 5.5 MEDIUM
Local
apple macos
ipados
iphone_os
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may out… NVD-CWE-noinfo
CVE-2024-44158 2024-09-25 00:50 2024-09-17 Show GitHub Exploit DB Packet Storm
313272 5.5 MEDIUM
Local
apple macos
iphone_os
ipados
visionos
watchos
tvos
An integer overflow was addressed through improved input validation. This issue is fixed in visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web… CWE-190
 Integer Overflow or Wraparound
CVE-2024-44198 2024-09-25 00:45 2024-09-17 Show GitHub Exploit DB Packet Storm
313273 3.3 LOW
Local
apple macos
ipados
iphone_os
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-40791 2024-09-25 00:44 2024-09-17 Show GitHub Exploit DB Packet Storm
313274 5.5 MEDIUM
Local
apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access protected user data. NVD-CWE-noinfo
CVE-2024-40801 2024-09-25 00:43 2024-09-17 Show GitHub Exploit DB Packet Storm
313275 5.5 MEDIUM
Local
apple macos
ipados
iphone_os
visionos
watchos
tvos
A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, … NVD-CWE-noinfo
CVE-2024-40850 2024-09-25 00:41 2024-09-17 Show GitHub Exploit DB Packet Storm
313276 6.1 MEDIUM
Network
dedecms dedecms DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. CWE-79
Cross-site Scripting
CVE-2024-46372 2024-09-25 00:40 2024-09-19 Show GitHub Exploit DB Packet Storm
313277 6.5 MEDIUM
Network
acquia mautic Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could potentially access sensitive data such a… CWE-276
Incorrect Default Permissions 
CVE-2022-25776 2024-09-25 00:19 2024-09-19 Show GitHub Exploit DB Packet Storm
313278 5.5 MEDIUM
Local
apple macos The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify protected parts of the file system. NVD-CWE-noinfo
CVE-2024-40843 2024-09-25 00:02 2024-09-17 Show GitHub Exploit DB Packet Storm
313279 5.5 MEDIUM
Local
apple macos An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data. NVD-CWE-noinfo
CVE-2024-40842 2024-09-24 23:56 2024-09-17 Show GitHub Exploit DB Packet Storm
313280 7.5 HIGH
Network
apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings. CWE-281
 Improper Preservation of Permissions
CVE-2024-40770 2024-09-24 23:55 2024-09-17 Show GitHub Exploit DB Packet Storm