Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3001 3.1 低
Network 		langchain Langchain-openai langchainのLangchain-openaiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41488 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3002 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-131
CWE-787
CVE-2026-41676 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3003 9.1 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-125
CWE-1284
CVE-2026-41677 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3004 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-41678 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3005 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-41681 2026-04-30 12:17 2026-04-24 Show GitHub Exploit DB Packet Storm
3006 9.8 緊急
Network 		Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-126
CWE-130
CVE-2026-41898 2026-04-30 12:17 2026-04-24 Show GitHub Exploit DB Packet Storm
3007 7 重要
Local 		レッドハット
libssh		 libssh
Red Hat Hardened Images 		libssh等の複数ベンダの製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-14821 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
3008 10 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-29
パストラバーサル (/../filename) 		CVE-2025-15036 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
3009 9.8 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-15379 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
3010 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-15381 2026-04-30 12:17 2026-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316361 - - - Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. W… - CVE-2024-6472 2024-08-7 01:31 2024-08-5 Show GitHub Exploit DB Packet Storm
316362 - - - K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference. - CVE-2024-36424 2024-08-7 01:30 2024-08-7 Show GitHub Exploit DB Packet Storm
316363 - - - A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input. - CVE-2024-41913 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316364 - - - A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as problematic. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor. … CWE-22
Path Traversal 		CVE-2024-7551 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316365 - - - The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115… - CVE-2024-7529 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316366 - - - Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129 and Firefox ESR < 128.1. - CVE-2024-7528 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316367 - - - It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Fi… - CVE-2024-7525 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316368 - - - Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. - CVE-2024-7521 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316369 - - - Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session deta… CWE-79
Cross-site Scripting 		CVE-2024-33993 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm
316370 - - - Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and r… CWE-79
Cross-site Scripting 		CVE-2024-33992 2024-08-7 01:30 2024-08-6 Show GitHub Exploit DB Packet Storm