Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2811	6.3	警告 Local	Uutils	uutils coreutils	Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-35374	2026-05-7 11:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

2812	3.3	低 Local	Uutils	uutils coreutils	Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性	CWE-176 Unicode エンコーディングの不適切な処理	CVE-2026-35375	2026-05-7 11:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

2813	5.8	警告 Local	Uutils	uutils coreutils	Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-35376	2026-05-7 11:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

2814	8.8	重要 Network	DBitNet	N300 T1 Pro ファームウェア	DBitNetのN300 T1 Pro ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-36956	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

2815	7.5	重要 Network	DBitNet	N300 T1 Pro ファームウェア	DBitNetのN300 T1 Pro ファームウェアにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-36957	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

2816	4.4	警告 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-40949	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

2817	6.5	警告 Network	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-40950	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

2818	5.5	警告 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40951	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

2819	9.8	緊急 Network	flowiseai	flowise	flowiseaiのflowiseにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性	CWE-943 データクエリロジックの特殊要素の不適切な中立化	CVE-2026-41274	2026-05-7 11:26	2026-04-23	Show	GitHub Exploit DB Packet Storm

2820	7.5	重要 Network	JetBrains	IntelliJ IDEA	JetBrainsのIntelliJ IDEAにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41882	2026-05-7 11:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313491	7.5	HIGH Network	apple	macos	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent.	NVD-CWE-noinfo	CVE-2024-44189	2024-09-25 03:33	2024-09-17	Show	GitHub Exploit DB Packet Storm

313492	2.4	LOW Physics	apple	iphone_os ipad_os	The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen.	NVD-CWE-noinfo	CVE-2024-44139	2024-09-25 03:30	2024-09-17	Show	GitHub Exploit DB Packet Storm

313493	5.5	MEDIUM Local	apple	macos	This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information.	NVD-CWE-noinfo	CVE-2024-44134	2024-09-25 03:26	2024-09-17	Show	GitHub Exploit DB Packet Storm

313494	5.5	MEDIUM Local	apple	macos	This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.	NVD-CWE-noinfo	CVE-2024-44133	2024-09-25 03:24	2024-09-17	Show	GitHub Exploit DB Packet Storm

313495	9.8	CRITICAL Network	tenda	ac15_firmware	Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.	CWE-77 Command Injection	CVE-2023-36103	2024-09-25 03:10	2024-09-11	Show	GitHub Exploit DB Packet Storm

313496	4.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project	CWE-863 Incorrect Authorization	CVE-2024-47159	2024-09-25 03:09	2024-09-20	Show	GitHub Exploit DB Packet Storm

313497	7.8	HIGH Local	samsung	exynos_1480_firmware exynos_2400_firmware	An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.	CWE-416 Use After Free	CVE-2024-31960	2024-09-25 03:08	2024-09-11	Show	GitHub Exploit DB Packet Storm

313498	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible	CWE-863 Incorrect Authorization	CVE-2024-47160	2024-09-25 03:03	2024-09-20	Show	GitHub Exploit DB Packet Storm

313499	5.5	MEDIUM Local	apple	macos	An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.	NVD-CWE-noinfo	CVE-2024-44186	2024-09-25 03:03	2024-09-17	Show	GitHub Exploit DB Packet Storm

313500	5.5	MEDIUM Local	apple	macos	A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files.	CWE-22 Path Traversal	CVE-2024-44190	2024-09-25 03:02	2024-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed