Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2751 5.5 警告
Local 		River Past Ringtone Converter Project River Past Ringtone Converter River Past Ringtone Converter ProjectのRiver Past Ringtone Converterにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25665 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
2752 7.8 重要
Local 		River Past Video Clear Project River Past Video Clear River Past Video Clear ProjectのRiver Past Video Clearにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25670 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
2753 7.8 重要
Local 		iBoysoft NTFS for Mac iBoysoftのNTFS for Macにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-2637 2026-04-28 10:11 2026-03-3 Show GitHub Exploit DB Packet Storm
2754 6.6 警告
Local 		Saurabh Kumar python-dotenv Saurabh Kumarのpython-dotenvにおける複数の脆弱性 CWE-59
CWE-61
CVE-2026-28684 2026-04-28 10:11 2026-04-20 Show GitHub Exploit DB Packet Storm
2755 10 緊急
Network 		Smallstep Step CA SmallstepのStep CAにおける複数の脆弱性 CWE-287
CWE-295
CWE-295
CVE-2026-30836 2026-04-28 10:11 2026-03-19 Show GitHub Exploit DB Packet Storm
2756 4.7 警告
Local 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-32290 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2757 6.8 警告
Physics 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32291 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2758 7.5 重要
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-32292 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2759 3.7 低
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-32293 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2760 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Contracts オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34300 2026-04-28 10:11 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315731 4.4 MEDIUM
Local 		dell emc_idrac_service_module Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service … CWE-787
 Out-of-bounds Write 		CVE-2024-38490 2024-08-2 22:54 2024-08-1 Show GitHub Exploit DB Packet Storm
315732 4.4 MEDIUM
Local 		dell emc_idrac_service_module Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service (p… CWE-787
 Out-of-bounds Write 		CVE-2024-38489 2024-08-2 22:54 2024-08-1 Show GitHub Exploit DB Packet Storm
315733 4.4 MEDIUM
Local 		dell emc_idrac_service_module Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service e… CWE-125
Out-of-bounds Read 		CVE-2024-38481 2024-08-2 22:54 2024-08-1 Show GitHub Exploit DB Packet Storm
315734 5.3 MEDIUM
Network 		- - The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it p… - CVE-2024-6704 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315735 4.3 MEDIUM
Network 		- - The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthentic… - CVE-2024-40723 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315736 4.3 MEDIUM
Network 		- - The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenti… CWE-121
Stack-based Buffer Overflow 		CVE-2024-40722 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315737 8.8 HIGH
Network 		- - The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attack… CWE-20
 Improper Input Validation  		CVE-2024-40721 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315738 - - - The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attack… CWE-20
 Improper Input Validation  		CVE-2024-40720 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315739 6.5 MEDIUM
Network 		- - The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious web… CWE-326
Inadequate Encryption Strength 		CVE-2024-40719 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
315740 - - - Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via enviro… - CVE-2024-41956 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm