Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2971	8.1	重要 Network	HashiCorp	Vault	HashiCorpのVaultにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-3605	2026-04-27 11:19	2026-04-17	Show	GitHub Exploit DB Packet Storm

2972	9.4	緊急 Network	dgraph	dgraph	dgraphにおける複数の脆弱性	CWE-200 CWE-215 CWE-522	CVE-2026-40173	2026-04-27 11:19	2026-04-15	Show	GitHub Exploit DB Packet Storm

2973	7.8	重要 Local	Composer	Composer	Composerにおける複数の脆弱性	CWE-20 CWE-78 CWE-78	CVE-2026-40176	2026-04-27 11:19	2026-04-15	Show	GitHub Exploit DB Packet Storm

2974	6.1	警告 Network	Apostrophe Technologies	sanitize-html ApostropheCMS	Apostrophe TechnologiesのApostropheCMS等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40186	2026-04-27 11:18	2026-04-15	Show	GitHub Exploit DB Packet Storm

2975	8.8	重要 Network	Composer	Composer	Composerにおける複数の脆弱性	CWE-20 CWE-78 CWE-78	CVE-2026-40261	2026-04-27 11:18	2026-04-15	Show	GitHub Exploit DB Packet Storm

2976	9.8	緊急 Network	Phpscriptsmall	Advance Gift Shop Pro Script	PhpscriptsmallのAdvance Gift Shop Pro ScriptにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25680	2026-04-27 11:18	2026-04-5	Show	GitHub Exploit DB Packet Storm

2977	9.8	緊急 Network	WISDOM	Pegasus CMS	WISDOMのPegasus CMSにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2019-25687	2026-04-27 11:18	2026-04-5	Show	GitHub Exploit DB Packet Storm

2978	8.8	重要 Network	Nextcloud windmill project	windmill Nextcloud Flow	Nextcloud等の複数ベンダの製品における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-22683	2026-04-27 11:18	2026-04-7	Show	GitHub Exploit DB Packet Storm

2979	7.5	重要 Network	XiangShan	NEMU	XiangShanのNEMUにおける複数の脆弱性	CWE-1287 CWE-131	CVE-2026-29645	2026-04-27 11:18	2026-04-20	Show	GitHub Exploit DB Packet Storm

2980	9.8	緊急 Network	XiangShan	NEMU	XiangShanのNEMUにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-29649	2026-04-27 11:18	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314701	8.8	HIGH Network	lopalopa	music_management_system	An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a c…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-42779	2024-08-24 01:09	2024-08-22	Show	GitHub Exploit DB Packet Storm

314702	9.8	CRITICAL Network	lopalopa	music_management_system	An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a craf…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-42777	2024-08-24 01:09	2024-08-22	Show	GitHub Exploit DB Packet Storm

314703	5.3	MEDIUM Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST /api/v4/users which allows a user to manipulate the creation date in POST /api/…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2024-42411	2024-08-24 01:04	2024-08-22	Show	GitHub Exploit DB Packet Storm

314704	4.3	MEDIUM Network	mattermost	mattermost	Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticated user, including guests, to mark any channel inside any team as read for any …	NVD-CWE-Other	CVE-2024-43813	2024-08-24 00:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

314705	-		-	-	ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.	-	CVE-2024-42564	2024-08-24 00:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

314706	9.8	CRITICAL Network	d3dsecurity	d8801_firmware	An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload	NVD-CWE-noinfo	CVE-2024-41623	2024-08-24 00:35	2024-08-13	Show	GitHub Exploit DB Packet Storm

314707	-		-	-	A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType pa…	-	CVE-2024-40487	2024-08-24 00:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

314708	-		-	-	In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux k…	-	CVE-2023-50810	2024-08-24 00:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

314709	7.2	HIGH Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as system admin which allows a System Role with edit access to …	NVD-CWE-Other	CVE-2024-8071	2024-08-24 00:34	2024-08-22	Show	GitHub Exploit DB Packet Storm

314710	6.5	MEDIUM Network	ibm	openpages_with_watson openpages_grc_platform	IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.	CWE-306 Missing Authentication for Critical Function	CVE-2024-35151	2024-08-24 00:32	2024-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed