Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3281 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23353 2026-04-27 11:27 2026-03-25 Show GitHub Exploit DB Packet Storm
3282 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-23354 2026-04-27 11:27 2026-03-25 Show GitHub Exploit DB Packet Storm
3283 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23355 2026-04-27 11:27 2026-03-25 Show GitHub Exploit DB Packet Storm
3284 7.4 重要
Network 		ERLANG Erlang/SSL (Erlang SSL)
Erlang/OTP
Erlang/Public Key (Public Key) 		ERLANGのErlang/OTP等の複数製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-32144 2026-04-27 11:27 2026-04-7 Show GitHub Exploit DB Packet Storm
3285 9.8 緊急
Network 		CoreWeave marimo CoreWeaveのmarimoにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-39987 2026-04-27 11:27 2026-04-9 Show GitHub Exploit DB Packet Storm
3286 9.8 緊急
Network 		codefuture CF Image Hosting Script codefutureのCF Image Hosting Scriptにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2019-25709 2026-04-27 11:27 2026-04-12 Show GitHub Exploit DB Packet Storm
3287 9.8 緊急
Network 		ERLANG Erlang/Inets (Inets)
Erlang/OTP 		ERLANGのErlang/Inets (Inets)等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28808 2026-04-27 11:27 2026-04-7 Show GitHub Exploit DB Packet Storm
3288 6.1 警告
Network 		Dovestones Software Ltd AD Phonebook Dovestones Software LtdのAD Phonebookにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-31013 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
3289 6.3 警告
Network 		Dovestones Software Ltd AD Self Update Dovestones Software LtdのAD Self Updateにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-31014 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
3290 9.8 緊急
Network 		reconurge Flowsint reconurgeのFlowsintにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-32311 2026-04-27 11:27 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314751 5.4 MEDIUM
Network 		jpatokal openflights openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php CWE-79
Cross-site Scripting 		CVE-2024-41346 2024-09-5 01:05 2024-08-30 Show GitHub Exploit DB Packet Storm
314752 9.8 CRITICAL
Network 		smackcoders sendgrid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress… CWE-89
SQL Injection 		CVE-2024-43965 2024-09-5 01:02 2024-08-30 Show GitHub Exploit DB Packet Storm
314753 9.8 CRITICAL
Network 		progress whatsup_gold In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users enc… CWE-89
SQL Injection 		CVE-2024-6671 2024-09-5 00:53 2024-08-30 Show GitHub Exploit DB Packet Storm
314754 9.8 CRITICAL
Network 		mozilla firefox Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code… CWE-787
 Out-of-bounds Write 		CVE-2024-8389 2024-09-5 00:50 2024-09-3 Show GitHub Exploit DB Packet Storm
314755 9.8 CRITICAL
Network 		seacms seacms SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del. CWE-89
SQL Injection 		CVE-2024-44921 2024-09-5 00:00 2024-09-3 Show GitHub Exploit DB Packet Storm
314756 6.1 MEDIUM
Network 		seacms seacms A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the si… CWE-79
Cross-site Scripting 		CVE-2024-44920 2024-09-4 23:59 2024-09-3 Show GitHub Exploit DB Packet Storm
314757 9.8 CRITICAL
Network 		rems contact_manager_with_export_to_vcf A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been rated as critical. This issue affects some unknown processing of the file /endpoint/delete-account.php … CWE-89
SQL Injection 		CVE-2024-8380 2024-09-4 23:58 2024-09-3 Show GitHub Exploit DB Packet Storm
314758 5.4 MEDIUM
Network 		3ds 3dexperience_enovia A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute … CWE-79
Cross-site Scripting 		CVE-2024-8004 2024-09-4 23:56 2024-09-2 Show GitHub Exploit DB Packet Storm
314759 5.4 MEDIUM
Network 		3ds 3dexperience A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script… CWE-79
Cross-site Scripting 		CVE-2024-7938 2024-09-4 23:53 2024-09-2 Show GitHub Exploit DB Packet Storm
314760 6.1 MEDIUM
Network 		checkmk checkmk Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view. CWE-79
Cross-site Scripting 		CVE-2024-38858 2024-09-4 23:39 2024-09-2 Show GitHub Exploit DB Packet Storm