Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3191 7.1 重要
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-5941 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3192 5.5 警告
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-5942 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3193 7.8 重要
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-5943 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3194 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. ch22 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-5962 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3195 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 fix: isolate Test.exec_code() namespace and subprocess to prevent CWE-95 code injection via globals() leak by sebastiondev&n…
CVE-2026-5970 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3196 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-5971 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3197 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5972 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3198 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5973 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3199 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5974 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3200 8.8 重要
Network
D-Link Systems, Inc. DIR-605L ファームウェア D-Link CorporationのDIR-605L ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-5979 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316021 6.5 MEDIUM
Network
oretnom23 computer_laboratory_management_system Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete ca… NVD-CWE-noinfo
CVE-2024-41332 2024-08-22 03:53 2024-08-12 Show GitHub Exploit DB Packet Storm
316022 9.8 CRITICAL
Network
tenda fh1206_firmware A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manip… CWE-787
 Out-of-bounds Write
CVE-2024-7615 2024-08-22 03:48 2024-08-12 Show GitHub Exploit DB Packet Storm
316023 9.8 CRITICAL
Network
tenda fh1206_firmware A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument p… CWE-787
 Out-of-bounds Write
CVE-2024-7614 2024-08-22 03:48 2024-08-12 Show GitHub Exploit DB Packet Storm
316024 9.8 CRITICAL
Network
tenda fh1206_firmware A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argume… CWE-787
 Out-of-bounds Write
CVE-2024-7613 2024-08-22 03:47 2024-08-12 Show GitHub Exploit DB Packet Storm
316025 - - - An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a directory traversal. - CVE-2024-43022 2024-08-22 03:35 2024-08-22 Show GitHub Exploit DB Packet Storm
316026 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php. CWE-352
 Origin Validation Error
CVE-2024-42608 2024-08-22 03:35 2024-08-20 Show GitHub Exploit DB Packet Storm
316027 8.8 HIGH
Network
siamonhasan warehouse_inventory_system A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. CWE-352
 Origin Validation Error
CVE-2024-42579 2024-08-22 03:35 2024-08-20 Show GitHub Exploit DB Packet Storm
316028 - - - In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede… - CVE-2024-20083 2024-08-22 03:35 2024-08-14 Show GitHub Exploit DB Packet Storm
316029 8.8 HIGH
Network
ivanti endpoint_manager_mobile An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying operating system of the ap… CWE-502
 Deserialization of Untrusted Data
CVE-2024-36131 2024-08-22 03:35 2024-08-7 Show GitHub Exploit DB Packet Storm
316030 9.6 CRITICAL
Network
koha koha Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via the additonal-contents.pl component. CWE-79
Cross-site Scripting
CVE-2024-28740 2024-08-22 03:35 2024-08-7 Show GitHub Exploit DB Packet Storm