Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3251 7.5 重要
Network 		monetr monetr monetrにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40481 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3252 5.5 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40515 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3253 6.3 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40516 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3254 7.6 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-6729 2026-04-27 11:29 2026-04-20 Show GitHub Exploit DB Packet Storm
3255 9.8 緊急
Network 		Topsec Technologies Group Inc. Tianxin Internet Behavior Management System Topsec Technologies Group Inc.のTianxin Internet Behavior Management SystemにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2021-4473 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3256 7.2 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-22666 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3257 9.8 緊急
Network 		Weaver Software Weaver e cology Weaver SoftwareのWeaver e cologyにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-22679 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3258 8.8 重要
Local 		PackageKit Project PackageKit PackageKit ProjectのPackageKitにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41651 2026-04-27 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
3259 4.4 警告
Local 		libjxl project libjxl libjxl projectのlibjxlにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2025-12474 2026-04-27 11:28 2026-02-11 Show GitHub Exploit DB Packet Storm
3260 7.5 重要
Network 		FirebirdSQL Firebird FirebirdSQLのFirebirdにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-65104 2026-04-27 11:28 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314901 9.8 CRITICAL
Network 		tenda o5_firmware A vulnerability was found in Tenda O5 1.0.0.8(5017). It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the a… CWE-787
 Out-of-bounds Write 		CVE-2024-8228 2024-08-29 09:11 2024-08-28 Show GitHub Exploit DB Packet Storm
314902 9.8 CRITICAL
Network 		tenda o6_firmware A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the function frommacFilterModify of the file /goform/operateMacFilter. The manipulati… CWE-787
 Out-of-bounds Write 		CVE-2024-8229 2024-08-29 09:10 2024-08-28 Show GitHub Exploit DB Packet Storm
314903 9.8 CRITICAL
Network 		tenda o6_firmware A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the … CWE-787
 Out-of-bounds Write 		CVE-2024-8230 2024-08-29 09:08 2024-08-28 Show GitHub Exploit DB Packet Storm
314904 6.5 MEDIUM
Network 		zoom rooms_controller
rooms
meeting_software_development_kit
workplace_virtual_desktop_infrastructure
workplace_desktop
workplace 		Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. CWE-787
 Out-of-bounds Write 		CVE-2024-42438 2024-08-29 09:01 2024-08-15 Show GitHub Exploit DB Packet Storm
314905 6.5 MEDIUM
Local 		zoom meeting_software_development_kit
workplace_desktop 		Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local… CWE-426
 Untrusted Search Path 		CVE-2024-42439 2024-08-29 09:00 2024-08-15 Show GitHub Exploit DB Packet Storm
314906 6.7 MEDIUM
Local 		zoom workplace_desktop
meeting_software_development_kit
rooms 		Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct… NVD-CWE-noinfo
CVE-2024-42440 2024-08-29 08:59 2024-08-15 Show GitHub Exploit DB Packet Storm
314907 6.7 MEDIUM
Local 		zoom workplace_desktop
meeting_software_development_kit
rooms 		Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct… NVD-CWE-noinfo
CVE-2024-42441 2024-08-29 08:58 2024-08-15 Show GitHub Exploit DB Packet Storm
314908 8.8 HIGH
Network 		google chrome Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion 		CVE-2024-7969 2024-08-29 08:15 2024-08-22 Show GitHub Exploit DB Packet Storm
314909 5.9 MEDIUM
Network 		ibm qradar_network_packet_capture IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit… CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-31905 2024-08-29 07:08 2024-08-16 Show GitHub Exploit DB Packet Storm
314910 6.2 MEDIUM
Local 		xpdfreader xpdf In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. CWE-369
CWE-190
 Divide By Zero
 Integer Overflow or Wraparound 		CVE-2024-7867 2024-08-29 06:59 2024-08-16 Show GitHub Exploit DB Packet Storm