Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2801	7.4	重要 Network	ERLANG	Erlang/SSL (Erlang SSL) Erlang/OTP Erlang/Public Key (Public Key)	ERLANGのErlang/OTP等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-32144	2026-04-27 11:27	2026-04-7	Show	GitHub Exploit DB Packet Storm

2802	9.8	緊急 Network	CoreWeave	marimo	CoreWeaveのmarimoにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-39987	2026-04-27 11:27	2026-04-9	Show	GitHub Exploit DB Packet Storm

2803	9.8	緊急 Network	codefuture	CF Image Hosting Script	codefutureのCF Image Hosting Scriptにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2019-25709	2026-04-27 11:27	2026-04-12	Show	GitHub Exploit DB Packet Storm

2804	9.8	緊急 Network	ERLANG	Erlang/Inets (Inets) Erlang/OTP	ERLANGのErlang/Inets (Inets)等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28808	2026-04-27 11:27	2026-04-7	Show	GitHub Exploit DB Packet Storm

2805	6.1	警告 Network	Dovestones Software Ltd	AD Phonebook	Dovestones Software LtdのAD Phonebookにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-31013	2026-04-27 11:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

2806	6.3	警告 Network	Dovestones Software Ltd	AD Self Update	Dovestones Software LtdのAD Self Updateにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-31014	2026-04-27 11:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

2807	9.8	緊急 Network	reconurge	Flowsint	reconurgeのFlowsintにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-32311	2026-04-27 11:27	2026-04-20	Show	GitHub Exploit DB Packet Storm

2808	7.5	重要 Network	freedom	SecureDrop-Client	freedomのSecureDrop-Clientにおける複数の脆弱性	CWE-36 CWE-73	CVE-2026-35465	2026-04-27 11:27	2026-04-18	Show	GitHub Exploit DB Packet Storm

2809	8.4	重要 Local	Gitlawb	OpenClaude	GitlawbのOpenClaudeにおける複数の脆弱性	CWE-22 CWE-284	CVE-2026-35570	2026-04-27 11:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

2810	8.8	重要 Network	M1k1o	Neko	M1k1oのNekoにおける複数の脆弱性	CWE-20 CWE-269 CWE-284 CWE-639 CWE-862	CVE-2026-39386	2026-04-27 11:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314251	4.3	MEDIUM Network	salesagility	suitecrm	SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Ver…	NVD-CWE-Other	CVE-2024-45392	2024-09-6 22:24	2024-09-6	Show	GitHub Exploit DB Packet Storm

314252	6.1	MEDIUM Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.	CWE-79 Cross-site Scripting	CVE-2024-44728	2024-09-6 22:23	2024-09-6	Show	GitHub Exploit DB Packet Storm

314253	6.1	MEDIUM Network	1e	platform	The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. …	CWE-601 Open Redirect	CVE-2024-7211	2024-09-6 22:23	2024-08-2	Show	GitHub Exploit DB Packet Storm

314254	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cu…	CWE-617 Reachable Assertion	CVE-2024-42251	2024-09-6 22:21	2024-08-8	Show	GitHub Exploit DB Packet Storm

314255	9.8	CRITICAL Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.	CWE-89 SQL Injection	CVE-2024-44727	2024-09-6 22:15	2024-09-6	Show	GitHub Exploit DB Packet Storm

314256	9.1	CRITICAL Network	mindsdb	mindsdb	MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-24759	2024-09-6 22:06	2024-09-6	Show	GitHub Exploit DB Packet Storm

314257	8.1	HIGH Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.	NVD-CWE-noinfo	CVE-2024-45098	2024-09-6 22:01	2024-09-6	Show	GitHub Exploit DB Packet Storm

314258	7.1	HIGH Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.	CWE-436 Interpretation Conflict	CVE-2024-45097	2024-09-6 21:51	2024-09-6	Show	GitHub Exploit DB Packet Storm

314259	6.5	MEDIUM Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.	NVD-CWE-Other	CVE-2024-45096	2024-09-6 21:34	2024-09-6	Show	GitHub Exploit DB Packet Storm

314260	-		-	-	An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der() can occur when the bits parameter is larger than the largest…	-	CVE-2024-45158	2024-09-6 21:08	2024-09-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed