Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2931	6.5	警告 Network	jqlang	jq	jqlangのjqにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-39979	2026-04-27 11:21	2026-04-13	Show	GitHub Exploit DB Packet Storm

2932	5.5	警告 Local	Linux Foundation	Sigstore Timestamp Authority	Linux FoundationのSigstore Timestamp Authorityにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-39984	2026-04-27 11:21	2026-04-15	Show	GitHub Exploit DB Packet Storm

2933	7.1	重要 Network	lfprojects	Zarf	lfprojectsのZarfにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40090	2026-04-27 11:21	2026-04-15	Show	GitHub Exploit DB Packet Storm

2934	4.4	警告 Local	Authzed, Inc.	SpiceDB	Authzed, Inc.のSpiceDBにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-40091	2026-04-27 11:21	2026-04-15	Show	GitHub Exploit DB Packet Storm

2935	5.4	警告 Network	OpenMage	Magento	OpenMageのMagentoにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40098	2026-04-27 11:21	2026-04-20	Show	GitHub Exploit DB Packet Storm

2936	7.5	重要 Network	free5gc	free5gc	free5GCにおける複数の脆弱性	CWE-285 CWE-636	CVE-2026-40248	2026-04-27 11:21	2026-04-16	Show	GitHub Exploit DB Packet Storm

2937	5.8	警告 Network	free5gc	free5gc udr	free5GCのfree5GC等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-40343	2026-04-27 11:21	2026-04-22	Show	GitHub Exploit DB Packet Storm

2938	8.8	重要 Network	OpenMage	Magento	OpenMageのMagentoにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-40488	2026-04-27 11:21	2026-04-20	Show	GitHub Exploit DB Packet Storm

2939	9.1	緊急 Network	FreeScout	FreeScout	FreeScoutにおける複数の脆弱性	CWE-330 CWE-340	CVE-2026-40496	2026-04-27 11:21	2026-04-21	Show	GitHub Exploit DB Packet Storm

2940	8.1	重要 Network	FreeScout	FreeScout	FreeScoutにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40497	2026-04-27 11:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314701	8.8	HIGH Network	lopalopa	music_management_system	An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a c…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-42779	2024-08-24 01:09	2024-08-22	Show	GitHub Exploit DB Packet Storm

314702	9.8	CRITICAL Network	lopalopa	music_management_system	An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a craf…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-42777	2024-08-24 01:09	2024-08-22	Show	GitHub Exploit DB Packet Storm

314703	5.3	MEDIUM Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST /api/v4/users which allows a user to manipulate the creation date in POST /api/…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2024-42411	2024-08-24 01:04	2024-08-22	Show	GitHub Exploit DB Packet Storm

314704	4.3	MEDIUM Network	mattermost	mattermost	Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticated user, including guests, to mark any channel inside any team as read for any …	NVD-CWE-Other	CVE-2024-43813	2024-08-24 00:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

314705	-		-	-	ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.	-	CVE-2024-42564	2024-08-24 00:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314706	9.8	CRITICAL Network	d3dsecurity	d8801_firmware	An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload	NVD-CWE-noinfo	CVE-2024-41623	2024-08-24 00:35	2024-08-13	Show	GitHub Exploit DB Packet Storm

314707	-		-	-	A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType pa…	-	CVE-2024-40487	2024-08-24 00:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

314708	-		-	-	In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux k…	-	CVE-2023-50810	2024-08-24 00:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

314709	7.2	HIGH Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as system admin which allows a System Role with edit access to …	NVD-CWE-Other	CVE-2024-8071	2024-08-24 00:34	2024-08-22	Show	GitHub Exploit DB Packet Storm

314710	6.5	MEDIUM Network	ibm	openpages_with_watson openpages_grc_platform	IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.	CWE-306 Missing Authentication for Critical Function	CVE-2024-35151	2024-08-24 00:32	2024-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed