Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2941	9.8	緊急 Network	flowiseai	flowise	flowiseaiのflowiseにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41265	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2942	7.5	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける複数の脆弱性	CWE-200 CWE-522 CWE-862	CVE-2026-41266	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2943	9.8	緊急 Network	flowiseai	flowise	flowiseaiのflowiseにおける複数の脆弱性	CWE-639 CWE-915	CVE-2026-41267	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2944	9.8	緊急 Network	flowiseai	flowise	flowiseaiのflowiseにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-41268	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2945	8.8	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-41269	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2946	8.3	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける複数の脆弱性	CWE-284 CWE-918	CVE-2026-41270	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2947	8.3	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41271	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2948	7.1	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41272	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2949	8.2	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41273	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

2950	7.5	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-41275	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314961	-		-	-	A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	-	CVE-2024-42586	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314962	-		-	-	A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	-	CVE-2024-42585	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314963	-		-	-	A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	-	CVE-2024-42576	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314964	-		-	-	School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.	-	CVE-2024-42569	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314965	-		-	-	Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.	-	CVE-2024-42562	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314966	-		-	-	A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HT…	-	CVE-2024-42560	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314967	-		-	-	A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.	-	CVE-2024-42555	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314968	-		-	-	A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.	-	CVE-2024-42553	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314969	7.5	HIGH Network	vonets	var1200-h_firmware var1200-l_firmware var600-h_firmware vap11ac_firmware vap11g-500s_firmware vbg1200_firmware vap11s-5g_firmware vap11s_firmware var11n-300_firmware vap11g…	A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to re…	CWE-22 Path Traversal	CVE-2024-41936	2024-08-21 01:26	2024-08-12	Show	GitHub Exploit DB Packet Storm

314970	7.8	HIGH Local	paloaltonetworks	globalprotect	A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-5915	2024-08-21 01:23	2024-08-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed