Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3321 7.4 重要
Network 		axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-42033 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3322 5.3 警告
Network 		axios project axios axios projectのaxiosにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42034 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3323 7.4 重要
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-113
CWE-1321
CVE-2026-42035 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3324 5.3 警告
Network 		axios project axios axios projectのaxiosにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42036 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3325 5.3 警告
Network 		axios project axios axios projectのaxiosにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-42037 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3326 7.5 重要
Network 		axios project axios axios projectのaxiosにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42038 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3327 7.5 重要
Network 		axios project axios axios projectのaxiosにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-42039 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3328 3.7 低
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-116
CWE-626
CVE-2026-42040 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3329 6.5 警告
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-1321
CWE-287
CVE-2026-42041 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3330 5.4 警告
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-183
CWE-201
CVE-2026-42042 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314431 9.8 CRITICAL
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authenti… CWE-22
Path Traversal 		CVE-2024-42469 2024-09-13 01:02 2024-08-12 Show GitHub Exploit DB Packet Storm
314432 7.5 HIGH
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated… CWE-22
Path Traversal 		CVE-2024-42468 2024-09-13 01:01 2024-08-12 Show GitHub Exploit DB Packet Storm
314433 6.1 MEDIUM
Network 		hyperview geoportal_toolkit HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will c… CWE-79
Cross-site Scripting 		CVE-2024-6450 2024-09-13 00:42 2024-08-28 Show GitHub Exploit DB Packet Storm
314434 - data_general
sgi
sun
hp
debian
ibm
bsdi 		dg_ux
irix
sunos
hp-ux
debian_linux
solaris
aix
bsd_os 		Buffer overflow in xlock program allows local users to execute commands as root. NVD-CWE-Other
CVE-1999-0038 2024-09-13 00:35 1997-04-26 Show GitHub Exploit DB Packet Storm
314435 6.5 MEDIUM
Network 		hyperview geoportal_toolkit HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. An unauthenticated remote attac… NVD-CWE-Other
CVE-2024-6449 2024-09-13 00:32 2024-08-28 Show GitHub Exploit DB Packet Storm
314436 - - - ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discovered in the implementation of the ESP-NOW group type message because there is n… CWE-125
Out-of-bounds Read 		CVE-2024-42484 2024-09-13 00:18 2024-09-13 Show GitHub Exploit DB Packet Storm
314437 7.5 HIGH
Network 		microfocus netiq_access_manager Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before … CWE-269
 Improper Privilege Management 		CVE-2024-4555 2024-09-13 00:13 2024-08-28 Show GitHub Exploit DB Packet Storm
314438 7.5 HIGH
Network 		microfocus netiq_access_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access … CWE-22
Path Traversal 		CVE-2024-4556 2024-09-13 00:09 2024-08-28 Show GitHub Exploit DB Packet Storm
314439 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL dereference Fix potential NULL dereference, in the case when "man", the resource manager might be … CWE-476
 NULL Pointer Dereference 		CVE-2023-52908 2024-09-12 23:54 2024-08-21 Show GitHub Exploit DB Packet Storm
314440 7.8 HIGH
Local 		beckhoff ipc_diagnostics_package
twincat\/bsd 		The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker. NVD-CWE-Other
CVE-2024-41173 2024-09-12 23:52 2024-08-27 Show GitHub Exploit DB Packet Storm