Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2591 8.8 重要
Network 		redis Redis Redis Ltd.のRedisにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-25243 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2592 7.8 重要
Local 		クアルコム X2000094 ファームウェア
XG101002 ファームウェア
Snapdragon AR1 Gen 1 ファームウェア
WSA8835 ファームウェア
XG101032 ファームウェア
WSA8830 ファームウェア
fastconnect 7800&nb… 		クアルコムのCologne ファームウェア等の複数製品における複数の脆弱性 CWE-749
CWE-787
CVE-2026-25266 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2593 9.8 緊急
Network 		クアルコム QCA7005 ファームウェア クアルコムのQCA7005 ファームウェアにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-25293 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2594 10 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 CWE-693
CWE-94
CVE-2026-26332 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2595 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28474 2026-05-8 12:08 2026-03-5 Show GitHub Exploit DB Packet Storm
2596 9.8 緊急
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-28780 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2597 7.3 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-29168 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2598 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox Focus Mozilla FoundationのMozilla Firefox Focusにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-2919 2026-05-8 12:08 2026-03-9 Show GitHub Exploit DB Packet Storm
2599 7.5 重要
Network 		OWASP ModSecurity OWASPのModSecurityにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-30923 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2600 8.8 重要
Network 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31450 2026-05-8 12:08 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318151 - - - Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34609 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318152 - - - Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34608 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318153 - - - Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34607 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318154 - - - Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34606 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318155 - - - Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34605 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318156 - - - Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34604 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
318157 - - - A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information. - CVE-2024-41260 2024-08-7 04:35 2024-08-2 Show GitHub Exploit DB Packet Storm
318158 - - - An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file - CVE-2024-40464 2024-08-7 03:35 2024-08-1 Show GitHub Exploit DB Packet Storm
318159 9.8 CRITICAL
Network 		vivotek ib8367a_firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of t… CWE-77
Command Injection 		CVE-2024-7443 2024-08-7 02:47 2024-08-4 Show GitHub Exploit DB Packet Storm
318160 9.8 CRITICAL
Network 		vivotek cc8160_firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-7439 2024-08-7 02:46 2024-08-4 Show GitHub Exploit DB Packet Storm