Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2941 8.8 重要
Network 		PJSIP pjsip PJSIPのpjsipにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-40614 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2942 6.5 警告
Network 		decidim decidim Decidim Free Software AssociationのDecidimにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-40869 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2943 9.8 緊急
Network 		PJSIP pjsip PJSIPのpjsipにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40892 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2944 7.5 重要
Network 		follow-redirects project Follow Redirects Follow Redirects projectのFollow Redirectsにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-40895 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2945 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-40907 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2946 5.3 警告
Network 		WWBN AVideo WWBNのAVideoにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-40908 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2947 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40909 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2948 5.4 警告
Network 		Docmost Docmost Docmostにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40927 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2949 5.4 警告
Network 		WWBN AVideo WWBNのAVideoにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-40928 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
2950 5.4 警告
Network 		WWBN AVideo WWBNのAVideoにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-40929 2026-04-27 11:20 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314841 5.4 MEDIUM
Network 		adonesevangelista laravel_property_management_system A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/no… CWE-79
Cross-site Scripting 		CVE-2024-7945 2024-08-22 00:25 2024-08-20 Show GitHub Exploit DB Packet Storm
314842 8.8 HIGH
Network 		adonesevangelista laravel_property_management_system A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.p… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7944 2024-08-22 00:24 2024-08-20 Show GitHub Exploit DB Packet Storm
314843 - - - Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add - CVE-2024-42612 2024-08-21 23:35 2024-08-21 Show GitHub Exploit DB Packet Storm
314844 8.8 HIGH
Network 		siamonhasan warehouse_inventory_system A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. CWE-352
 Origin Validation Error 		CVE-2024-42577 2024-08-21 23:35 2024-08-20 Show GitHub Exploit DB Packet Storm
314845 - - - Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks… - CVE-2024-35539 2024-08-21 23:35 2024-08-20 Show GitHub Exploit DB Packet Storm
314846 7.5 HIGH
Network 		tamparongj_03 online_graduate_tracer_system A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file /tracking/admin/exportcs.php. The mani… NVD-CWE-noinfo
CVE-2024-7843 2024-08-21 23:13 2024-08-16 Show GitHub Exploit DB Packet Storm
314847 7.5 HIGH
Network 		tamparongj_03 online_graduate_tracer_system A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/export… NVD-CWE-noinfo
CVE-2024-7842 2024-08-21 23:13 2024-08-16 Show GitHub Exploit DB Packet Storm
314848 5.4 MEDIUM
Network 		tamparongj_03 online_graduate_tracer_system A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admi… CWE-79
Cross-site Scripting 		CVE-2024-7844 2024-08-21 23:12 2024-08-16 Show GitHub Exploit DB Packet Storm
314849 7.5 HIGH
Network 		oretnom23 clinics_patient_management_system A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0. This vulnerability affects unknown code of the file /pms/ajax/check_user_name.php. The manipu… CWE-89
SQL Injection 		CVE-2024-7841 2024-08-21 23:12 2024-08-16 Show GitHub Exploit DB Packet Storm
314850 6.1 MEDIUM
Network 		oretnom23 simple_forum_website A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. Th… CWE-79
Cross-site Scripting 		CVE-2024-7929 2024-08-21 23:10 2024-08-20 Show GitHub Exploit DB Packet Storm