Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3411 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月28日） - - 2026-05-1 14:31 2026-04-30 Show GitHub Exploit DB Packet Storm
3412 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7100 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
3413 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7102 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
3414 7.2 重要
Local 		click project click Pallets projectのClickにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-7246 2026-05-1 10:49 2026-04-30 Show GitHub Exploit DB Packet Storm
3415 7.8 重要
Local 		LizardSystems Terminal Services Manager LizardSystemsのTerminal Services Managerにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2018-25259 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
3416 5.5 警告
Local 		EZB Systems UltraISO EZB SystemsのUltraISOにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25267 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
3417 6.1 警告
Network 		IceWarp, Inc. icewarp IceWarp, Inc.のicewarpにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25269 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
3418 8.1 重要
Network 		レッドハット openshift ai レッドハットのopenshift aiにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類 		CVE-2025-12805 2026-05-1 10:49 2026-03-26 Show GitHub Exploit DB Packet Storm
3419 7.1 重要
Local 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける複数の脆弱性 CWE-121
CWE-787
CWE-787
CVE-2026-0819 2026-05-1 10:49 2026-03-19 Show GitHub Exploit DB Packet Storm
3420 6.3 警告
Network 		libssh
レッドハット		 Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
libssh
Red Hat Hardened Images 		libssh等の複数ベンダの製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-0964 2026-05-1 10:49 2026-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313661 4.3 MEDIUM
Adjacent 		gotenna gotenna_pro The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encrypti… CWE-203
 Information Exposure Through Discrepancy 		CVE-2024-47129 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313662 4.3 MEDIUM
Adjacent 		gotenna gotenna_pro The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advised to share the encryption key via local QR for higher secu… NVD-CWE-noinfo
CVE-2024-47128 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313663 3.1 LOW
Adjacent 		gotenna gotenna_pro In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This … CWE-287
Improper Authentication 		CVE-2024-47127 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313664 8.8 HIGH
Adjacent 		gotenna gotenna_pro The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the … CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2024-47126 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313665 5.4 MEDIUM
Adjacent 		gotenna gotenna_pro The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryptio… CWE-287
Improper Authentication 		CVE-2024-47125 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313666 6.5 MEDIUM
Adjacent 		gotenna gotenna_pro The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to t… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-47124 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313667 6.5 MEDIUM
Adjacent 		gotenna gotenna_pro In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows for complete decryption of keys stored on the EUD if physically compromised. … CWE-922
 Insecure Storage of Sensitive Information 		CVE-2024-47122 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313668 4.3 MEDIUM
Adjacent 		gotenna gotenna The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected. Users th… NVD-CWE-Other
CVE-2024-43814 2024-10-18 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
313669 5.4 MEDIUM
Network 		cacti cacti Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized when saving external links in `links.php` . Morever, the said fileurl is placed i… CWE-79
Cross-site Scripting 		CVE-2024-43362 2024-10-18 03:14 2024-10-8 Show GitHub Exploit DB Packet Storm
313670 9.8 CRITICAL
Network 		oretnom23 online_veterinary_appointment_system A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/manage_category.php. Th… CWE-89
SQL Injection 		CVE-2024-9818 2024-10-18 03:13 2024-10-11 Show GitHub Exploit DB Packet Storm