Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3171	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31635	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3172	9.1	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31636	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3173	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31637	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3174	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31638	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3175	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-31639	2026-04-30 12:33	2026-04-24	Show	GitHub Exploit DB Packet Storm

3176	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31640	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

3177	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31641	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

3178	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-31642	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

3179	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31643	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

3180	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31644	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315361	4.8	MEDIUM Adjacent	teldat	rs123_firmware rs123w_firmware	Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.	CWE-79 Cross-site Scripting	CVE-2022-39996	2024-08-31 00:17	2024-08-28	Show	GitHub Exploit DB Packet Storm

315362	4.3	MEDIUM Network	smashballoon	reviews_feed	The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i…	CWE-352 Origin Validation Error	CVE-2024-8200	2024-08-31 00:08	2024-08-28	Show	GitHub Exploit DB Packet Storm

315363	4.3	MEDIUM Network	smashballoon	reviews_feed	The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa…	CWE-862 Missing Authorization	CVE-2024-8199	2024-08-31 00:04	2024-08-28	Show	GitHub Exploit DB Packet Storm

315364	8.8	HIGH Network	skyss	arfa-cms	A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.	CWE-352 Origin Validation Error	CVE-2024-45264	2024-08-31 00:02	2024-08-28	Show	GitHub Exploit DB Packet Storm

315365	9.8	CRITICAL Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.	CWE-78 OS Command	CVE-2024-44342	2024-08-30 23:57	2024-08-28	Show	GitHub Exploit DB Packet Storm

315366	9.8	CRITICAL Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST requ…	CWE-78 OS Command	CVE-2024-44341	2024-08-30 23:57	2024-08-28	Show	GitHub Exploit DB Packet Storm

315367	8.8	HIGH Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.	CWE-78 OS Command	CVE-2024-44340	2024-08-30 23:56	2024-08-28	Show	GitHub Exploit DB Packet Storm

315368	9.8	CRITICAL Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.	CWE-78 OS Command	CVE-2024-41622	2024-08-30 23:55	2024-08-28	Show	GitHub Exploit DB Packet Storm

315369	6.5	MEDIUM Network	ptc	thingworx	An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-40395	2024-08-30 23:35	2024-08-28	Show	GitHub Exploit DB Packet Storm

315370	-		-	-	A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet…	CWE-94 Code Injection	CVE-2024-5651	2024-08-30 23:15	2024-08-12	Show	GitHub Exploit DB Packet Storm