Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2561 8.1 重要
Network 		フォーティネット FortiAnalyzer Cloud
FortiManager Cloud 		フォーティネットのFortiAnalyzer Cloud等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-22828 2026-05-7 12:06 2026-04-14 Show GitHub Exploit DB Packet Storm
2562 9.8 緊急
Network 		IBM IBM i IBMのIBM iにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-2311 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
2563 9.1 緊急
Network 		Eclipse Foundation Jetty Eclipse FoundationのJettyにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-2332 2026-05-7 12:06 2026-04-14 Show GitHub Exploit DB Packet Storm
2564 9.1 緊急
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-23500 2026-05-7 12:06 2026-04-17 Show GitHub Exploit DB Packet Storm
2565 5.3 警告
Local 		FreeType Project FreeType FreeType ProjectのFreeTypeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-23865 2026-05-7 12:06 2026-03-2 Show GitHub Exploit DB Packet Storm
2566 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現 		CVE-2026-25542 2026-05-7 12:06 2026-04-21 Show GitHub Exploit DB Packet Storm
2567 6.5 警告
Adjacent 		FRRouting Project FRRouting FRRouting ProjectのFRRoutingにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-28532 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
2568 8.8 重要
Network 		CloudARK KubePlus CloudARKのKubePlusにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-29955 2026-05-7 12:06 2026-04-13 Show GitHub Exploit DB Packet Storm
2569 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動 		CVE-2026-31431 2026-05-7 12:06 2026-04-22 Show GitHub Exploit DB Packet Storm
2570 5.3 警告
Network 		レッドハット
kernel.org		 util-linux
Red Hat Hardened Images 		kernel.org等の複数ベンダの製品における代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避 		CVE-2026-3184 2026-05-7 12:06 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313331 9.8 CRITICAL
Network 		fabianros online_quiz_site A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-9009 2024-09-26 02:46 2024-09-20 Show GitHub Exploit DB Packet Storm
313332 9.8 CRITICAL
Network 		antfin sofa-hessian sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous cla… NVD-CWE-noinfo
CVE-2024-46983 2024-09-26 02:46 2024-09-20 Show GitHub Exploit DB Packet Storm
313333 7.5 HIGH
Network 		traefik traefik Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the req… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2024-45410 2024-09-26 02:39 2024-09-20 Show GitHub Exploit DB Packet Storm
313334 9.8 CRITICAL
Network 		d7y dragonfly Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project. Dragonfly uses JWT … CWE-798
 Use of Hard-coded Credentials 		CVE-2023-27584 2024-09-26 02:28 2024-09-20 Show GitHub Exploit DB Packet Storm
313335 6.5 MEDIUM
Network 		envoyproxy envoy Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject unexpected content into access logs. This is… CWE-116
 Improper Encoding or Escaping of Output 		CVE-2024-45808 2024-09-26 02:18 2024-09-20 Show GitHub Exploit DB Packet Storm
313336 5.3 MEDIUM
Network 		jflow_project jflow A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. It has been rated as problematic. This issue affects the function AttachmentUploadController of the file /WF/Ath/EntityMutliFile_Load.… NVD-CWE-Other
CVE-2024-9003 2024-09-26 02:18 2024-09-20 Show GitHub Exploit DB Packet Storm
313337 7.5 HIGH
Network 		envoyproxy envoy Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To … NVD-CWE-noinfo
CVE-2024-45807 2024-09-26 02:12 2024-09-20 Show GitHub Exploit DB Packet Storm
313338 5.4 MEDIUM
Network 		cryoutcreations kahuna Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0. CWE-79
Cross-site Scripting 		CVE-2024-43994 2024-09-26 02:09 2024-09-18 Show GitHub Exploit DB Packet Storm
313339 7.5 HIGH
Network 		trianglemicroworks
siemens 		iec_61850_source_code_library
sicam_a8000_firmware
sicam_scc_firmware
sicam_egs_firmware
sicam_s8000
sitipe_at 		Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in … CWE-120
Classic Buffer Overflow 		CVE-2024-34057 2024-09-26 02:08 2024-09-19 Show GitHub Exploit DB Packet Storm
313340 8.8 HIGH
Network 		frogcms_project frogcms FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 CWE-352
 Origin Validation Error 		CVE-2024-46086 2024-09-26 02:08 2024-09-19 Show GitHub Exploit DB Packet Storm