Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2721	3.3	低 Local	ちとらソフト	Lhaz+ Lhaz	LhazおよびLhaz+におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41530	2026-05-11 17:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

2722	-	-	Apache Software Foundation	Apache HTTP Server	Apache HTTP Server 2.4における複数の脆弱性に対するアップデート（2026年5月）	-	CVE-2026-23918 CVE-2026-24072 CVE-2026-28780 CVE-2026-29168 CVE-2026-29169 CVE-2026-33006 CVE-2026-33007 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-34059	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

2723	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月07日）	-	-	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

2724	7.2	重要 Network	株式会社GROWI	GROWI	GROWIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41951	2026-05-11 15:29	2026-05-11	Show	GitHub Exploit DB Packet Storm

2725	7.4	重要 Network	株式会社EPG	iOSアプリ「くら寿司公式アプリ」 Androidアプリ「くら寿司公式アプリ」	スマートフォンアプリ「くら寿司公式アプリ」における証明書検証不備の脆弱性	CWE-Other その他	CVE-2026-41872	2026-05-11 12:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

2726	3.3	低 Local	X.Org Foundation	libxpm	libXpmにおける境界外読み取りの脆弱性	CWE-Other その他	CVE-2026-4367	2026-05-11 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

2727	7.3	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2024-46507	2026-05-11 11:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

2728	7.5	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2024-46508	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

2729	9.8	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-38431	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

2730	6.1	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-38432	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312221	7.2	HIGH Network	dell	enterprise_sonic_distribution	Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker w…	CWE-78 OS Command	CVE-2024-45763	2024-11-14 01:52	2024-11-9	Show	GitHub Exploit DB Packet Storm

312222	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix potential memory leak in bcmasp_xmit() The bcmasp_xmit() returns NETDEV_TX_OK without freeing skb in case of map…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-50170	2024-11-14 01:44	2024-11-7	Show	GitHub Exploit DB Packet Storm

312223	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining info_cnt before repeating btf fields When trying to repeat the btf fields for array of nested struct, it…	CWE-129 Improper Validation of Array Index	CVE-2024-50161	2024-11-14 01:36	2024-11-7	Show	GitHub Exploit DB Packet Storm

312224	-		-	-	An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.	-	CVE-2024-51055	2024-11-14 01:35	2024-11-9	Show	GitHub Exploit DB Packet Storm

312225	-		-	-	An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.	-	CVE-2024-40240	2024-11-14 01:35	2024-11-9	Show	GitHub Exploit DB Packet Storm

312226	7.0	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported use-after-free [0] in reqsk_timer_handler(…	CWE-416 Use After Free	CVE-2024-50154	2024-11-14 01:17	2024-11-7	Show	GitHub Exploit DB Packet Storm

312227	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() The sun3_82586_send_packet() returns NETDEV_TX_OK without f…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-50168	2024-11-14 01:16	2024-11-7	Show	GitHub Exploit DB Packet Storm

312228	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL poin…	CWE-476 NULL Pointer Dereference	CVE-2024-50160	2024-11-14 01:13	2024-11-7	Show	GitHub Exploit DB Packet Storm

312229	6.5	MEDIUM Adjacent	zephyrproject	zephyr	In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow.	CWE-787 Out-of-bounds Write	CVE-2024-6442	2024-11-14 01:04	2024-10-4	Show	GitHub Exploit DB Packet Storm

312230	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a possible memory leak In bnxt_re_setup_chip_ctx() when bnxt_qplib_map_db_bar() fails driver is not freeing the…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-50172	2024-11-14 00:55	2024-11-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed