Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3421	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31504	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3422	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31505	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3423	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31506	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3424	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31507	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

3425	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31508	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

3426	8.8	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-23780	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

3427	9.8	緊急 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-23781	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

3428	7.5	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-23782	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

3429	9.9	緊急 Network	Doorman	Doorman	Doormanにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-30269	2026-04-30 12:14	2026-04-20	Show	GitHub Exploit DB Packet Storm

3430	7.5	重要 Network	PowerDNS	PowerDNS Recursor dnsdist PowerDNS Authoritative Server	PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33257	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314911	9.1	CRITICAL Network	huawei	emui harmonyos	Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.	CWE-22 Path Traversal	CVE-2024-45443	2024-09-6 22:33	2024-09-4	Show	GitHub Exploit DB Packet Storm

314912	4.3	MEDIUM Network	salesagility	suitecrm	SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Ver…	NVD-CWE-Other	CVE-2024-45392	2024-09-6 22:24	2024-09-6	Show	GitHub Exploit DB Packet Storm

314913	6.1	MEDIUM Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.	CWE-79 Cross-site Scripting	CVE-2024-44728	2024-09-6 22:23	2024-09-6	Show	GitHub Exploit DB Packet Storm

314914	6.1	MEDIUM Network	1e	platform	The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. …	CWE-601 Open Redirect	CVE-2024-7211	2024-09-6 22:23	2024-08-2	Show	GitHub Exploit DB Packet Storm

314915	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cu…	CWE-617 Reachable Assertion	CVE-2024-42251	2024-09-6 22:21	2024-08-8	Show	GitHub Exploit DB Packet Storm

314916	9.8	CRITICAL Network	angeljudesuarez	event_management_system	Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.	CWE-89 SQL Injection	CVE-2024-44727	2024-09-6 22:15	2024-09-6	Show	GitHub Exploit DB Packet Storm

314917	9.1	CRITICAL Network	mindsdb	mindsdb	MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-24759	2024-09-6 22:06	2024-09-6	Show	GitHub Exploit DB Packet Storm

314918	8.1	HIGH Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.	NVD-CWE-noinfo	CVE-2024-45098	2024-09-6 22:01	2024-09-6	Show	GitHub Exploit DB Packet Storm

314919	7.1	HIGH Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.	CWE-436 Interpretation Conflict	CVE-2024-45097	2024-09-6 21:51	2024-09-6	Show	GitHub Exploit DB Packet Storm

314920	6.5	MEDIUM Network	ibm	aspera_faspex	IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.	NVD-CWE-Other	CVE-2024-45096	2024-09-6 21:34	2024-09-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed