Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3281 7.5 重要
Network 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-40192 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
3282 8.2 重要
Network 		maddy project maddy maddy projectのmaddyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-40193 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
3283 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40244 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
3284 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40250 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
3285 6.1 警告
Local 		openCryptoki Project openCryptoki openCryptoki ProjectのopenCryptokiにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40253 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
3286 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2026-40260 2026-04-24 11:41 2026-04-17 Show GitHub Exploit DB Packet Storm
3287 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-269
CWE-863
CVE-2026-40291 2026-04-24 11:41 2026-04-14 Show GitHub Exploit DB Packet Storm
3288 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおける複数の脆弱性 CWE-345
CWE-434
CWE-79
CVE-2026-40487 2026-04-24 11:41 2026-04-18 Show GitHub Exploit DB Packet Storm
3289 9.8 緊急
Network 		FreeScout FreeScout FreeScoutにおける複数の脆弱性 CWE-200
CWE-284
CWE-770
CVE-2026-40498 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
3290 6.1 警告
Network 		FreeScout FreeScout FreeScoutにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40565 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 6.4 MEDIUM
Network 		- - Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management interface. Attackers wi… New CWE-79
Cross-site Scripting 		CVE-2020-37237 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
32 6.4 MEDIUM
Network 		- - NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news additio… New CWE-79
Cross-site Scripting 		CVE-2020-37236 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
33 6.4 MEDIUM
Network 		- - WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by manipulating the Logo URL parame… New CWE-79
Cross-site Scripting 		CVE-2020-37235 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
34 6.2 MEDIUM
Local 		- - Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can … New CWE-120
Classic Buffer Overflow 		CVE-2020-37234 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
35 6.4 MEDIUM
Network 		- - WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script code through the fi… New CWE-79
Cross-site Scripting 		CVE-2020-37233 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
36 7.8 HIGH
Local 		- - Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Atta… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37232 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
37 7.8 HIGH
Local 		- - Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Atta… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37231 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
38 7.8 HIGH
Local 		- - Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37230 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
39 7.8 HIGH
Local 		- - OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unqu… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37229 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
40 9.8 CRITICAL
Network 		- - iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retr… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-37228 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm