Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3131 8.5 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41371 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3132 5.8 警告
Network 		OpenClaw OpenClaw OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41372 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
3133 5.8 警告
Network 		OpenClaw OpenClaw OpenClawにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-41389 2026-04-30 10:59 2026-04-20 Show GitHub Exploit DB Packet Storm
3134 9.1 緊急
Network 		Teluu Ltd. PJSIP Teluu Ltd.のPJSIPにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-41415 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3135 7.5 重要
Network 		Teluu Ltd. PJSIP Teluu Ltd.のPJSIPにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41416 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3136 5.4 警告
Network 		authlib authlib authlibにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41425 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3137 6.1 警告
Network 		pretalx pretalx pretalxにおける複数の脆弱性 CWE-116
CWE-79
CVE-2026-41426 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3138 9.1 緊急
Network 		budibase budibase budibaseにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-41428 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3139 9.1 緊急
Network 		BACnet Stack BACnet Stack BACnet Stackにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-41475 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3140 9.9 緊急
Network 		Saltcorn Saltcorn SaltcornにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-41478 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314521 7.8 HIGH
Local 		qualcomm fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
qcm5430_firmware
qcm6490_firmware
qcs5430_firmware
qcs6490_firmware
video_collaboration_vc3_firmware… 		Memory corruption when the captureRead QDCM command is invoked from user-space. CWE-125
Out-of-bounds Read 		CVE-2024-33047 2024-09-5 02:07 2024-09-2 Show GitHub Exploit DB Packet Storm
314522 7.5 HIGH
Network 		qualcomm ar8035_firmware
ar9380_firmware
csr8811_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_… 		Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. CWE-125
Out-of-bounds Read 		CVE-2024-33050 2024-09-5 02:07 2024-09-2 Show GitHub Exploit DB Packet Storm
314523 7.8 HIGH
Local 		qualcomm fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
qcm5430_firmware
qcm6490_firmware
qcm8550_firmware
qcs5430_firmware
qcs6490_firmware
qcs8550_firm… 		Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine. CWE-787
 Out-of-bounds Write 		CVE-2024-33054 2024-09-5 02:06 2024-09-2 Show GitHub Exploit DB Packet Storm
314524 7.8 HIGH
Local 		qualcomm 315_5g_iot_firmware
aqt1000_firmware
ar8031_firmware
ar8035_firmware
c-v2x_9150_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect_6700_firmwar… 		Memory corruption when two threads try to map and unmap a single node simultaneously. CWE-416
 Use After Free 		CVE-2024-33060 2024-09-5 02:06 2024-09-2 Show GitHub Exploit DB Packet Storm
314525 7.5 HIGH
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_firmware
immersive_home_214_firmware
immersive_home_2… 		Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. CWE-125
Out-of-bounds Read 		CVE-2024-33057 2024-09-5 02:06 2024-09-2 Show GitHub Exploit DB Packet Storm
314526 7.8 HIGH
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
fastconnect_7800_firmware
qca6574a_firmware
qca6584au_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
qca8081_firmware
q… 		Memory corruption while processing concurrent IOCTL calls. CWE-416
 Use After Free 		CVE-2024-38401 2024-09-5 02:05 2024-09-2 Show GitHub Exploit DB Packet Storm
314527 4.3 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to disallow the modification of local channels by a remote, when shared channels are enabled, which allows a… NVD-CWE-noinfo
CVE-2024-41162 2024-09-5 02:03 2024-08-2 Show GitHub Exploit DB Packet Storm
314528 7.8 HIGH
Local 		openatom openharmony in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2024-38386 2024-09-5 01:56 2024-09-2 Show GitHub Exploit DB Packet Storm
314529 4.3 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.9.x <= 9.9.0 and 9.5.x <= 9.5.6 fail to validate the source of sync messages and only allow the correct remote IDs, which allows a malicious remote to set arbitrary RemoteId val… CWE-346
 Origin Validation Error 		CVE-2024-41926 2024-09-5 01:55 2024-08-2 Show GitHub Exploit DB Packet Storm
314530 6.5 MEDIUM
Network 		misp misp In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin. CWE-863
 Incorrect Authorization 		CVE-2024-45509 2024-09-5 01:45 2024-09-2 Show GitHub Exploit DB Packet Storm