Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3161	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31625	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3162	7.1	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-31626	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3163	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31627	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3164	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31628	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3165	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31629	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3166	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31630	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3167	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31631	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3168	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31632	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3169	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-31633	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3170	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-31634	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314021	6.1	MEDIUM Network	ordat	ordat.erp	ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.	CWE-79 Cross-site Scripting	CVE-2024-34335	2024-09-19 05:32	2024-09-13	Show	GitHub Exploit DB Packet Storm

314022	7.5	HIGH Network	ordat	ordat.erp	ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.	CWE-89 SQL Injection	CVE-2024-34334	2024-09-19 05:32	2024-09-13	Show	GitHub Exploit DB Packet Storm

314023	9.8	CRITICAL Network	soplanning	soplanning	A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publ…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-27115	2024-09-19 05:32	2024-09-11	Show	GitHub Exploit DB Packet Storm

314024	3.1	LOW Network	keyfactor	ejbca	The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CM…	NVD-CWE-noinfo	CVE-2024-36066	2024-09-19 05:28	2024-09-13	Show	GitHub Exploit DB Packet Storm

314025	7.8	HIGH Local	wibu	wibukey	An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in ke…	CWE-787 Out-of-bounds Write	CVE-2024-45181	2024-09-19 05:26	2024-09-13	Show	GitHub Exploit DB Packet Storm

314026	6.1	MEDIUM Network	discourse	calendar	Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be susceptible to XSS attacks. This vulnerability only aff…	CWE-79 Cross-site Scripting	CVE-2024-45303	2024-09-19 05:25	2024-09-13	Show	GitHub Exploit DB Packet Storm

314027	6.1	MEDIUM Network	eclipse	glassfish	In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code includ…	CWE-601 Open Redirect	CVE-2024-8646	2024-09-19 05:20	2024-09-11	Show	GitHub Exploit DB Packet Storm

314028	6.5	MEDIUM Network	reedos	aim-star	This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulat…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-45786	2024-09-19 05:12	2024-09-11	Show	GitHub Exploit DB Packet Storm

314029	7.5	HIGH Network	reedos	aim-star	This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by …	NVD-CWE-Other	CVE-2024-45788	2024-09-19 04:57	2024-09-11	Show	GitHub Exploit DB Packet Storm

314030	4.3	MEDIUM Network	reedos	aim-star	This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacke…	CWE-354 Improper Validation of Integrity Check Value	CVE-2024-45789	2024-09-19 04:55	2024-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed