Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2801	8.8	重要 Network	it-novum GmbH	openITCOCKPIT	it-novum GmbHのopenITCOCKPITにおける複数の脆弱性	CWE-20 CWE-78 CWE-78	CVE-2026-24893	2026-04-30 12:16	2026-04-14	Show	GitHub Exploit DB Packet Storm

2802	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-25205	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

2803	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25206	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

2804	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-25207	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

2805	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-25208	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

2806	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25209	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

2807	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25908	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

2808	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26942	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

2809	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26943	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

2810	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26951	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314111	6.1	MEDIUM Network	rems	php_crud	A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the arg…	CWE-79 Cross-site Scripting	CVE-2024-8562	2024-09-11 00:36	2024-09-8	Show	GitHub Exploit DB Packet Storm

314112	-		-	-	D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.	-	CVE-2024-44410	2024-09-11 00:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314113	-		-	-	ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of an immediately-invoked function expression (IIFE) for a macro. NOTE: this issu…	-	CVE-2024-44085	2024-09-11 00:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314114	9.8	CRITICAL Network	rems	php_crud	A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component …	CWE-89 SQL Injection	CVE-2024-8561	2024-09-11 00:35	2024-09-8	Show	GitHub Exploit DB Packet Storm

314115	8.8	HIGH Network	oretnom23	simple_invoice_generator_system	A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affected is an unknown function of the file /save_invoice.php. The manipulation of …	CWE-89 SQL Injection	CVE-2024-8560	2024-09-11 00:32	2024-09-8	Show	GitHub Exploit DB Packet Storm

314116	7.2	HIGH Network	remyandrade	online_food_menu	A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the file /endpoint/delete-menu.php. The manipul…	CWE-89 SQL Injection	CVE-2024-8559	2024-09-11 00:31	2024-09-8	Show	GitHub Exploit DB Packet Storm

314117	7.8	HIGH Local	arm	bifrost_gpu_kernel_driver valhall_gpu_kernel_driver 5th_gen_gpu_architecture_kernel_driver	Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make imp…	CWE-416 Use After Free	CVE-2024-4607	2024-09-11 00:03	2024-08-5	Show	GitHub Exploit DB Packet Storm

314118	7.8	HIGH Local	arm	bifrost_gpu_kernel_driver valhall_gpu_kernel_driver 5th_gen_gpu_architecture_kernel_driver	Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make imp…	CWE-416 Use After Free	CVE-2024-2937	2024-09-11 00:03	2024-08-5	Show	GitHub Exploit DB Packet Storm

314119	-		-	-	Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.	-	CVE-2024-40754	2024-09-10 23:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

314120	-		-	-	D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.	-	CVE-2024-44411	2024-09-10 23:35	2024-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed