Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2961	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-31567	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

2962	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31568	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

2963	7.3	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31569	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

2964	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31570	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

2965	6.1	警告 Network	CyberPanel	CyberPanel	CyberPanelにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41472	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

2966	9.1	緊急 Network	CyberPanel	CyberPanel	CyberPanelにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41473	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

2967	8.2	重要 Local	レッドハット	Red Hat Advanced Cluster Management for Kubernetes	レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-4740	2026-04-30 12:08	2026-04-7	Show	GitHub Exploit DB Packet Storm

2968	9.8	緊急 Network	Pipecat	Pipecat	Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-62373	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

2969	7.8	重要 Local	Amazon.com, Inc.	Kiro IDE	Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-0830	2026-04-30 12:08	2026-01-9	Show	GitHub Exploit DB Packet Storm

2970	5.4	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-25720	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316151	-		-	-	Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.	-	CVE-2024-34605	2024-08-7 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

316152	-		-	-	Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.	-	CVE-2024-34604	2024-08-7 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

316153	-		-	-	A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information.	-	CVE-2024-41260	2024-08-7 04:35	2024-08-2	Show	GitHub Exploit DB Packet Storm

316154	-		-	-	An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file	-	CVE-2024-40464	2024-08-7 03:35	2024-08-1	Show	GitHub Exploit DB Packet Storm

316155	9.8	CRITICAL Network	vivotek	ib8367a_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of t…	CWE-77 Command Injection	CVE-2024-7443	2024-08-7 02:47	2024-08-4	Show	GitHub Exploit DB Packet Storm

316156	9.8	CRITICAL Network	vivotek	cc8160_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2024-7439	2024-08-7 02:46	2024-08-4	Show	GitHub Exploit DB Packet Storm

316157	9.8	CRITICAL Network	vivotek	sd9364_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipula…	CWE-77 Command Injection	CVE-2024-7442	2024-08-7 02:45	2024-08-4	Show	GitHub Exploit DB Packet Storm

316158	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style…	CWE-78 OS Command	CVE-2024-7470	2024-08-7 02:37	2024-08-5	Show	GitHub Exploit DB Packet Storm

316159	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. This vulnerability affects the function sslvpn_config_mod of the file /vpn/list_vp…	CWE-78 OS Command	CVE-2024-7469	2024-08-7 02:36	2024-08-5	Show	GitHub Exploit DB Packet Storm

316160	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. This affects the function sslvpn_config_mod of the file /vpn/list_service_manage…	CWE-78 OS Command	CVE-2024-7468	2024-08-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed