Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3241 8.1 重要
Adjacent
Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-7424 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3242 6.5 警告
Adjacent
Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-7425 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3243 8.1 重要
Adjacent
Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-7426 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3244 5.4 警告
Network
レッドハット build of keycloak レッドハットのbuild of keycloakにおけるリクエストの直接送信に関する脆弱性 CWE-425
CWE-noinfo
CVE-2026-7500 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3245 8.8 重要
Network
HKUDS OpenHarness HKUDSのOpenHarnessにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-7551 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3246 9.8 緊急
Network
Synway SMG Gateway Management Software SynwayのSMG Gateway Management SoftwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-71284 2026-05-7 10:53 2026-04-30 Show GitHub Exploit DB Packet Storm
3247 7.8 重要
Local
KDE project KCoreAddons KDE projectのKCoreAddonsにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化
CVE-2026-41526 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
3248 8.8 重要
Network
SailPoint Technologies Holdings, Inc. IdentityIQ SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5712 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3249 5.5 警告
Local
Canonical pdfunite Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2018-25306 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3250 9.8 緊急
Network
Kvcache-ai Ktransformers Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-26210 2026-05-7 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317421 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet CWE-352
 Origin Validation Error
CVE-2024-42613 2024-08-21 22:11 2024-08-21 Show GitHub Exploit DB Packet Storm
317422 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete CWE-352
 Origin Validation Error
CVE-2024-42611 2024-08-21 22:11 2024-08-21 Show GitHub Exploit DB Packet Storm
317423 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files CWE-352
 Origin Validation Error
CVE-2024-42610 2024-08-21 22:11 2024-08-21 Show GitHub Exploit DB Packet Storm
317424 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics CWE-352
 Origin Validation Error
CVE-2024-42616 2024-08-21 22:10 2024-08-21 Show GitHub Exploit DB Packet Storm
317425 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma CWE-352
 Origin Validation Error
CVE-2024-42618 2024-08-21 22:09 2024-08-21 Show GitHub Exploit DB Packet Storm
317426 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32 CWE-352
 Origin Validation Error
CVE-2024-42617 2024-08-21 22:09 2024-08-21 Show GitHub Exploit DB Packet Storm
317427 8.8 HIGH
Network
pligg pligg_cms Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php CWE-352
 Origin Validation Error
CVE-2024-42621 2024-08-21 21:50 2024-08-21 Show GitHub Exploit DB Packet Storm
317428 7.5 HIGH
Network
floraison fugit fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to p… NVD-CWE-noinfo
CVE-2024-43380 2024-08-21 21:38 2024-08-20 Show GitHub Exploit DB Packet Storm
317429 3.1 LOW
Network
trufflesecurity trufflehog TruffleHog is a secrets scanning tool. Prior to v3.81.9, this vulnerability allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to mak… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-43379 2024-08-21 21:37 2024-08-20 Show GitHub Exploit DB Packet Storm
317430 9.8 CRITICAL
Network
jielink\+_jsotc2016_project jielink\+_jsotc2016 A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionali… NVD-CWE-Other
CVE-2024-7921 2024-08-21 21:34 2024-08-19 Show GitHub Exploit DB Packet Storm