Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3301	4.8	警告 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-33006	2026-05-7 11:27	2026-05-4	Show	GitHub Exploit DB Packet Storm

3302	5.3	警告 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-33007	2026-05-7 11:27	2026-05-4	Show	GitHub Exploit DB Packet Storm

3303	4.3	警告 Network		-	KeystoneJSのKeystoneにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-33326	2026-05-7 11:27	2026-03-24	Show	GitHub Exploit DB Packet Storm

3304	9.8	緊急 Network	Absolute Software	secure access	Absolute Softwareのsecure accessにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-33446	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3305	9.8	緊急 Network	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-33447	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3306	3.3	低 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-33448	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3307	7.5	重要 Network	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-33449	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3308	5.5	警告 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33450	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3309	7.8	重要 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33451	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

3310	5.5	警告 Local	Absolute Software	secure access	Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-33452	2026-05-7 11:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
317401	4.3	MEDIUM Network	majeedraza	carousel_slider	WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature. While logged in to the WordPress site with Carouse…	CWE-352 Origin Validation Error	CVE-2024-45269	2024-09-4 20:49	2024-09-2	Show	GitHub Exploit DB Packet Storm

317402	4.7	MEDIUM Network	code-projects	pharmacy_management_system	A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the compone…	CWE-79 Cross-site Scripting	CVE-2024-8366	2024-09-4 20:26	2024-09-1	Show	GitHub Exploit DB Packet Storm

317403	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7821	2024-09-4 19:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

317404	-		-	-	YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.	-	CVE-2024-41435	2024-09-4 06:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

317405	7.8	HIGH Local	automationanywhere	automation_360	A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload. NOTE: Automation Anywhere disputes this report, arg…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2024-41226	2024-09-4 06:15	2024-08-6	Show	GitHub Exploit DB Packet Storm

317406	9.8	CRITICAL Network	project_expense_monitoring_system_project	project_expense_monitoring_system	A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file printtransfer.php. The manipulation of the …	CWE-89 SQL Injection	CVE-2024-7937	2024-09-4 05:43	2024-08-20	Show	GitHub Exploit DB Packet Storm

317407	9.8	CRITICAL Network	project_expense_monitoring_system_project	project_expense_monitoring_system	A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affects an unknown part of the file transferred_report.php. The manipulation of the a…	CWE-89 SQL Injection	CVE-2024-7936	2024-09-4 05:43	2024-08-20	Show	GitHub Exploit DB Packet Storm

317408	5.4	MEDIUM Network	rems	leads_manager_tool	A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the ar…	CWE-79 Cross-site Scripting	CVE-2024-7942	2024-09-4 05:39	2024-08-20	Show	GitHub Exploit DB Packet Storm

317409	-		-	-	ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.	-	CVE-2024-41436	2024-09-4 05:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

317410	-		-	-	A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted CSV file.	-	CVE-2024-42901	2024-09-4 05:35	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed