Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2811 8.8 重要
Network 		Lawnchair Lawnchair Lawnchairにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-39866 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
2812 6.1 警告
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-116
CWE-79
CVE-2026-40302 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
2813 7.5 重要
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-400
CWE-789
CVE-2026-40303 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
2814 5.3 警告
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-284
CWE-863
CVE-2026-40304 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
2815 8.8 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40502 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
2816 6.5 警告
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40503 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
2817 8.8 重要
Network 		FreePBX API Module FreePBXのAPI ModuleにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40520 2026-04-27 11:26 2026-04-21 Show GitHub Exploit DB Packet Storm
2818 6.1 警告
Network 		Yusuke Inuzuka (yuin) goldmark Yusuke Inuzuka (yuin)のgoldmarkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-5160 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
2819 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-0186 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
2820 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-3922 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315601 - - - Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. - CVE-2024-34612 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315602 - - - Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. - CVE-2024-34611 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315603 - - - Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. - CVE-2024-34610 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315604 - - - Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34609 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315605 - - - Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34608 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315606 - - - Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34607 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315607 - - - Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34606 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315608 - - - Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34605 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315609 - - - Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34604 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
315610 - - - A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information. - CVE-2024-41260 2024-08-7 04:35 2024-08-2 Show GitHub Exploit DB Packet Storm