Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2881	7.5	重要 Network	RansomLook	RansomLook	RansomLookにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-40584	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

2882	5.6	警告 Local	Home Assistant Ecosystem	Home Assistant Command-line Interface (hass-cli)	Home Assistant EcosystemのHome Assistant Command-line Interface (hass-cli)における複数の脆弱性	CWE-1336 CWE-94	CVE-2026-40602	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

2883	5.5	警告 Local	Dayuan Jiang (DayuanJiang)	Next AI Draw.io	Dayuan Jiang (DayuanJiang)のNext AI Draw.ioにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40608	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2884	8.1	重要 Network	Zcash Foundation	Zebra-consensus Zebrad	Zcash FoundationのZebra-consensus等の複数製品における誤った要素を使用した比較に関する脆弱性	CWE-1025 誤った要素を使用した比較	CVE-2026-40880	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2885	7.5	重要 Network	Zcash Foundation	zebra-network Zebrad	Zcash Foundationのzebra-network等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40881	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2886	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40888	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2887	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40889	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2888	8.8	重要 Network	Jos de Jong	math.js	Math.jsにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-40897	2026-04-30 12:12	2026-04-24	Show	GitHub Exploit DB Packet Storm

2889	8.8	重要 Network	Paperclip	paperclipai	PaperclipのpaperclipaiにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-41208	2026-04-30 12:12	2026-04-23	Show	GitHub Exploit DB Packet Storm

2890	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-41320	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314301	5.5	MEDIUM Local	samsung	android	Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.	CWE-276 Incorrect Default Permissions	CVE-2024-34648	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314302	3.3	LOW Local	samsung	android	Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration.	NVD-CWE-Other	CVE-2024-34640	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314303	4.6	MEDIUM Physics	samsung	android	Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-34639	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314304	5.5	MEDIUM Local	samsung	android	Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulner…	NVD-CWE-Other	CVE-2024-34644	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314305	5.5	MEDIUM Local	samsung	android	Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vu…	NVD-CWE-Other	CVE-2024-34643	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314306	4.6	MEDIUM Physics	samsung	android	Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.	CWE-863 Incorrect Authorization	CVE-2024-34642	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314307	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape…	NVD-CWE-noinfo	CVE-2024-43914	2024-09-6 03:03	2024-08-26	Show	GitHub Exploit DB Packet Storm

314308	4.6	MEDIUM Physics	samsung	android	Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.	NVD-CWE-noinfo	CVE-2024-34645	2024-09-6 03:02	2024-09-4	Show	GitHub Exploit DB Packet Storm

314309	5.5	MEDIUM Local	samsung	android	Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.	NVD-CWE-Other	CVE-2024-34646	2024-09-6 03:01	2024-09-4	Show	GitHub Exploit DB Packet Storm

314310	5.5	MEDIUM Local	samsung	android	Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager.	NVD-CWE-noinfo	CVE-2024-34655	2024-09-6 03:00	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed