Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3031	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25209	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

3032	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25908	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

3033	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26942	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3034	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26943	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3035	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26951	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3036	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-27172	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

3037	7.8	重要 Local	ggml.ai	llama.cpp	ggml.aiのllama.cppにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-27940	2026-04-30 12:16	2026-03-12	Show	GitHub Exploit DB Packet Storm

3038	9.8	緊急 Network	OpenPLC Project	OpenPLC_v3 ファームウェア	OpenPLC ProjectのOpenPLC_v3 ファームウェアにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2026-28205	2026-04-30 12:16	2026-04-9	Show	GitHub Exploit DB Packet Storm

3039	4.3	警告 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-29197	2026-04-30 12:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

3040	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	AC18 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のAC18 ファームウェアにおけるコマンドインジェクションの脆弱性	CWE-77 CWE-77	CVE-2026-31255	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315691	-		-	-	A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	-	CVE-2024-42585	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315692	-		-	-	A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	-	CVE-2024-42576	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315693	-		-	-	School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.	-	CVE-2024-42569	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315694	-		-	-	Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.	-	CVE-2024-42562	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315695	-		-	-	A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HT…	-	CVE-2024-42560	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315696	-		-	-	A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.	-	CVE-2024-42555	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315697	-		-	-	A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.	-	CVE-2024-42553	2024-08-21 01:35	2024-08-20	Show	GitHub Exploit DB Packet Storm

315698	7.5	HIGH Network	vonets	var1200-h_firmware var1200-l_firmware var600-h_firmware vap11ac_firmware vap11g-500s_firmware vbg1200_firmware vap11s-5g_firmware vap11s_firmware var11n-300_firmware vap11g…	A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to re…	CWE-22 Path Traversal	CVE-2024-41936	2024-08-21 01:26	2024-08-12	Show	GitHub Exploit DB Packet Storm

315699	7.8	HIGH Local	paloaltonetworks	globalprotect	A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-5915	2024-08-21 01:23	2024-08-15	Show	GitHub Exploit DB Packet Storm

315700	9.8	CRITICAL Network	paloaltonetworks	cortex_xsoar_commonscripts	A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.	CWE-77 Command Injection	CVE-2024-5914	2024-08-21 01:22	2024-08-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed