Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2791 9.1 緊急
Network
レッドハット
GNU Project
GnuTLS
Red Hat Enterprise Linux
Red Hat OpenShift Container Platform
GNU Project等の複数ベンダの製品における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-33845 2026-05-7 11:27 2026-04-30 Show GitHub Exploit DB Packet Storm
2792 5.3 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-33857 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
2793 5.3 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける複数の脆弱性 CWE-125
CWE-170
CVE-2026-34032 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
2794 7.5 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード
CVE-2026-34059 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
2795 6.5 警告
Network
SAP human capital management SAPのhuman capital managementにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい
CVE-2026-34264 2026-05-7 11:27 2026-04-14 Show GitHub Exploit DB Packet Storm
2796 7.5 重要
Network
Go JOSE project Go JOSE Go JOSE projectのGo JOSEにおけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外
CVE-2026-34986 2026-05-7 11:27 2026-04-6 Show GitHub Exploit DB Packet Storm
2797 5.5 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける関数の戻り値に対する不適切なチェックに関する脆弱性 CWE-253
関数の戻り値に対する不適切なチェック
CVE-2026-35339 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
2798 5.5 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける関数の戻り値に対する不適切なチェックに関する脆弱性 CWE-253
関数の戻り値に対する不適切なチェック
CVE-2026-35340 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
2799 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル
CVE-2026-35342 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
2800 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2026-35343 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313581 - - - An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 13… - CVE-2024-25073 2024-09-24 04:15 2024-09-11 Show GitHub Exploit DB Packet Storm
313582 5.5 MEDIUM
Local
apple macos The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory. NVD-CWE-noinfo
CVE-2024-27860 2024-09-24 04:10 2024-09-17 Show GitHub Exploit DB Packet Storm
313583 5.5 MEDIUM
Local
apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. NVD-CWE-noinfo
CVE-2024-40837 2024-09-24 03:50 2024-09-17 Show GitHub Exploit DB Packet Storm
313584 6.5 MEDIUM
Network
backstage backstage Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak … CWE-22
Path Traversal
CVE-2024-45816 2024-09-24 03:41 2024-09-18 Show GitHub Exploit DB Packet Storm
313585 6.5 MEDIUM
Network
backstage backstage Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the s… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2024-45815 2024-09-24 03:31 2024-09-18 Show GitHub Exploit DB Packet Storm
313586 5.4 MEDIUM
Network
backstage backstage Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content th… CWE-79
Cross-site Scripting
CVE-2024-46976 2024-09-24 03:27 2024-09-18 Show GitHub Exploit DB Packet Storm
313587 6.1 MEDIUM
Network
google chrome Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts… CWE-79
Cross-site Scripting
CVE-2024-8907 2024-09-24 03:23 2024-09-18 Show GitHub Exploit DB Packet Storm
313588 6.1 MEDIUM
Network
oretnom23 resort_reservation_system A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipul… CWE-79
Cross-site Scripting
CVE-2024-8951 2024-09-24 03:12 2024-09-18 Show GitHub Exploit DB Packet Storm
313589 7.5 HIGH
Network
micropython micropython A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffe… CWE-787
 Out-of-bounds Write
CVE-2024-8948 2024-09-24 03:10 2024-09-18 Show GitHub Exploit DB Packet Storm
313590 8.8 HIGH
Network
oretnom23 online_eyewear_shop A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. Th… CWE-282
 Improper Ownership Management
CVE-2024-8949 2024-09-24 03:05 2024-09-18 Show GitHub Exploit DB Packet Storm