Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3351 9.8 緊急
Network
SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-40630 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3352 5.3 警告
Network
opentelemetry opentelemetry
OpenTelemetry.Extensions.Propagators
Opentelemetry.api
opentelemetryのOpentelemetry.api等の複数製品における過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-40894 2026-04-30 12:18 2026-04-23 Show GitHub Exploit DB Packet Storm
3353 10 緊急
Network
VoidZero Inc. Vite+ VoidZero Inc.のVite+におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41211 2026-04-30 12:18 2026-04-23 Show GitHub Exploit DB Packet Storm
3354 5.4 警告
Network
Siemvk (siemvk) Openlearn Siemvk (siemvk)のOpenlearnにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-41243 2026-04-30 12:18 2026-04-23 Show GitHub Exploit DB Packet Storm
3355 8.8 重要
Network
Deskflow Deskflow Deskflowにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2026-41476 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3356 7.8 重要
Local
Deskflow Deskflow Deskflowにおける複数の脆弱性 CWE-306
CWE-862
CVE-2026-41477 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3357 6.5 警告
Network
langchain Langchain-text-splitters langchainのLangchain-text-splittersにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-41481 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3358 3.1
Network
langchain Langchain-openai langchainのLangchain-openaiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-41488 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3359 9.8 緊急
Network
Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-131
CWE-787
CVE-2026-41676 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
3360 9.1 緊急
Network
Steven Fackler rust-openssl rust-OpenSSL Projectのrust-OpenSSLにおける複数の脆弱性 CWE-125
CWE-1284
CVE-2026-41677 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315391 6.6 MEDIUM
Local
intel oneapi_base_toolkit
distribution_for_gdb
Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-25562 2024-08-31 12:40 2024-08-14 Show GitHub Exploit DB Packet Storm
315392 3.3 LOW
Local
intel oneapi_base_toolkit
distribution_for_gdb
Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-24973 2024-08-31 12:39 2024-08-14 Show GitHub Exploit DB Packet Storm
315393 7.8 HIGH
Local
intel oneapi_base_toolkit
distribution_for_gdb
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-276
Incorrect Default Permissions 
CVE-2024-23495 2024-08-31 12:38 2024-08-14 Show GitHub Exploit DB Packet Storm
315394 7.3 HIGH
Local
intel oneapi_base_toolkit
distribution_for_gdb
Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element
CVE-2024-23491 2024-08-31 12:37 2024-08-14 Show GitHub Exploit DB Packet Storm
315395 5.4 MEDIUM
Network
yzncms yzncms A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the config… CWE-79
Cross-site Scripting
CVE-2024-42939 2024-08-31 11:58 2024-08-21 Show GitHub Exploit DB Packet Storm
315396 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4538 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
315397 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4528 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
315398 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4412 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
315399 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-42379 2024-08-31 05:15 2024-08-31 Show GitHub Exploit DB Packet Storm
315400 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4540 2024-08-31 05:15 2024-08-31 Show GitHub Exploit DB Packet Storm