Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2671 6.1 警告
Network 		dragonexpert Recent Threads on Index dragonexpertのRecent Threads on Indexにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25309 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
2672 6.4 警告
Local 		レッドハット Web Terminal レッドハットのWeb Terminalにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-57853 2026-05-7 12:01 2026-04-8 Show GitHub Exploit DB Packet Storm
2673 8.5 重要
Network 		オラクル Oracle Life Sciences Empirica Signal オラクルのOracle Life Sciences Empirica Signalにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-21997 2026-05-7 12:01 2026-04-21 Show GitHub Exploit DB Packet Storm
2674 9.8 緊急
Network 		Arc53 DocsGPT Arc53のDocsGPTにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-26015 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
2675 5.5 警告
Local 		レッドハット
Sequoia PGP		 rpm-sequoia
Red Hat Hardened Images
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-2625 2026-05-7 12:01 2026-04-3 Show GitHub Exploit DB Packet Storm
2676 10 緊急
Network 		scoder Lupa scoderのLupaにおける複数の脆弱性 CWE-284
CWE-639
CVE-2026-34444 2026-05-7 12:01 2026-04-6 Show GitHub Exploit DB Packet Storm
2677 4.7 警告
Local 		Moritz Andre Myrseth (moritzmyrz) coursevault-preview Moritz Andre Myrseth (moritzmyrz)のcoursevault-previewにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35613 2026-05-7 12:01 2026-04-7 Show GitHub Exploit DB Packet Storm
2678 7.8 重要
Local 		wkentaro gdown wkentaroのgdownにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40491 2026-05-7 12:01 2026-04-18 Show GitHub Exploit DB Packet Storm
2679 7.4 重要
Network 		Skim-rs Skim Skim-rsのSkimにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41414 2026-05-7 12:01 2026-04-24 Show GitHub Exploit DB Packet Storm
2680 7.5 重要
Network 		Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42402 2026-05-7 12:01 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313461 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 ("ASoC: soc.h: don't create dummy … CWE-476
 NULL Pointer Dereference 		CVE-2024-46793 2024-09-25 01:00 2024-09-18 Show GitHub Exploit DB Packet Storm
313462 7.5 HIGH
Network 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. CWE-281
 Improper Preservation of Permissions 		CVE-2024-44149 2024-09-25 00:58 2024-09-17 Show GitHub Exploit DB Packet Storm
313463 6.1 MEDIUM
Network 		apple macos This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Visiting a malicious website may lead to user interface spo… NVD-CWE-noinfo
CVE-2024-40797 2024-09-25 00:58 2024-09-17 Show GitHub Exploit DB Packet Storm
313464 7.5 HIGH
Network 		apple macos A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An attacker may be able to read sensitive in… NVD-CWE-noinfo
CVE-2024-40848 2024-09-25 00:57 2024-09-17 Show GitHub Exploit DB Packet Storm
313465 5.5 MEDIUM
Local 		apple macos The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive user data. NVD-CWE-noinfo
CVE-2024-40847 2024-09-25 00:56 2024-09-17 Show GitHub Exploit DB Packet Storm
313466 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination. NVD-CWE-noinfo
CVE-2024-40846 2024-09-25 00:56 2024-09-17 Show GitHub Exploit DB Packet Storm
313467 7.5 HIGH
Network 		apple macos A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data. NVD-CWE-noinfo
CVE-2024-44152 2024-09-25 00:55 2024-09-17 Show GitHub Exploit DB Packet Storm
313468 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination. NVD-CWE-noinfo
CVE-2024-40845 2024-09-25 00:55 2024-09-17 Show GitHub Exploit DB Packet Storm
313469 5.5 MEDIUM
Local 		apple macos
ipados
iphone_os 		A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able t… NVD-CWE-noinfo
CVE-2024-40844 2024-09-25 00:55 2024-09-17 Show GitHub Exploit DB Packet Storm
313470 7.5 HIGH
Adjacent 		canonical anbox_cloud Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbo… CWE-295
Improper Certificate Validation  		CVE-2024-8287 2024-09-25 00:52 2024-09-19 Show GitHub Exploit DB Packet Storm