Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2791	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-20061	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

2792	6.5	警告 Local	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア	シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-20064	2026-04-30 12:17	2026-03-4	Show	GitHub Exploit DB Packet Storm

2793	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20078	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

2794	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20081	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

2795	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22761	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

2796	9.1	緊急 Network	GNOME Project	libsoup	GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-2369	2026-04-30 12:17	2026-03-19	Show	GitHub Exploit DB Packet Storm

2797	9.6	緊急 Network	マイクロソフト	Microsoft Partner Center	Microsoft パートナーセンターの特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24303	2026-04-30 12:17	2026-04-23	Show	GitHub Exploit DB Packet Storm

2798	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24504	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

2799	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24505	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

2800	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24506	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314081	-		-	-	Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.	-	CVE-2023-37231	2024-09-11 02:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314082	-		-	-	Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.	-	CVE-2023-37230	2024-09-11 02:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314083	-		-	-	Loftware Spectrum before 5.1 allows SSRF.	-	CVE-2023-37229	2024-09-11 02:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314084	-		-	-	Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.	-	CVE-2023-37227	2024-09-11 02:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314085	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer In af9035_i2c_master_xfer, msg is controlled by user. Whe…	CWE-476 NULL Pointer Dereference	CVE-2023-52915	2024-09-11 02:12	2024-09-6	Show	GitHub Exploit DB Packet Storm

314086	7.5	HIGH Network	dlink	dir-823g_firmware	D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user …	CWE-862 Missing Authorization	CVE-2024-44408	2024-09-11 02:01	2024-09-7	Show	GitHub Exploit DB Packet Storm

314087	9.8	CRITICAL Network	dlink	di-8100g_firmware	D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via msp_info.htm.	CWE-77 Command Injection	CVE-2024-44402	2024-09-11 01:58	2024-09-7	Show	GitHub Exploit DB Packet Storm

314088	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to access the protocol field of the VLAN header, valid…	CWE-908 Use of Uninitialized Resource	CVE-2024-44983	2024-09-11 01:57	2024-09-5	Show	GitHub Exploit DB Packet Storm

314089	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job depends on job->vm being valid, the last xe_exec_queue_put can destroy the VM.…	CWE-416 Use After Free	CVE-2024-44978	2024-09-11 01:51	2024-09-5	Show	GitHub Exploit DB Packet Storm

314090	8.6	HIGH Network	fogproject	fogproject	FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 an…	CWE-77 Command Injection	CVE-2024-42348	2024-09-11 01:49	2024-08-3	Show	GitHub Exploit DB Packet Storm