Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3441	4.8	警告 Network	GFI	GFI HelpDesk	GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23752	2026-04-30 12:14	2026-04-20	Show	GitHub Exploit DB Packet Storm

3442	4.8	警告 Network	GFI	GFI HelpDesk	GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23753	2026-04-30 12:14	2026-04-20	Show	GitHub Exploit DB Packet Storm

3443	5.4	警告 Network	GFI	GFI HelpDesk	GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23756	2026-04-30 12:13	2026-04-20	Show	GitHub Exploit DB Packet Storm

3444	5.4	警告 Network	GFI	GFI HelpDesk	GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23757	2026-04-30 12:13	2026-04-20	Show	GitHub Exploit DB Packet Storm

3445	5.4	警告 Network	GFI	GFI HelpDesk	GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23758	2026-04-30 12:13	2026-04-20	Show	GitHub Exploit DB Packet Storm

3446	6.5	警告 Network	Mattermost, Inc.	Focalboard	Mattermost, Inc.のFocalboardにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-25773	2026-04-30 12:13	2026-04-3	Show	GitHub Exploit DB Packet Storm

3447	4.3	警告 Network	Mattermost, Inc.	Focalboard	Mattermost, Inc.のFocalboardにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-28736	2026-04-30 12:13	2026-04-3	Show	GitHub Exploit DB Packet Storm

3448	7.8	重要 Local	DeepCool	DeepCreative	DeepCoolのDeepCreativeにおける安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2026-30266	2026-04-30 12:13	2026-04-20	Show	GitHub Exploit DB Packet Storm

3449	7.5	重要 Network	Angeet	ES3 KVM Firmware	AngeetのES3 KVM Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-32297	2026-04-30 12:13	2026-03-17	Show	GitHub Exploit DB Packet Storm

3450	9.1	緊急 Network	Angeet	ES3 KVM Firmware	AngeetのES3 KVM FirmwareにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-32298	2026-04-30 12:13	2026-03-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314961	4.6	MEDIUM Physics	samsung	android	Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.	CWE-22 Path Traversal	CVE-2024-34653	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314962	5.5	MEDIUM Local	samsung	android	Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.	CWE-276 Incorrect Default Permissions	CVE-2024-34648	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314963	3.3	LOW Local	samsung	android	Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration.	NVD-CWE-Other	CVE-2024-34640	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314964	4.6	MEDIUM Physics	samsung	android	Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-34639	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

314965	5.5	MEDIUM Local	samsung	android	Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulner…	NVD-CWE-Other	CVE-2024-34644	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314966	5.5	MEDIUM Local	samsung	android	Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vu…	NVD-CWE-Other	CVE-2024-34643	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314967	4.6	MEDIUM Physics	samsung	android	Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.	CWE-863 Incorrect Authorization	CVE-2024-34642	2024-09-6 03:03	2024-09-4	Show	GitHub Exploit DB Packet Storm

314968	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape…	NVD-CWE-noinfo	CVE-2024-43914	2024-09-6 03:03	2024-08-26	Show	GitHub Exploit DB Packet Storm

314969	4.6	MEDIUM Physics	samsung	android	Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.	NVD-CWE-noinfo	CVE-2024-34645	2024-09-6 03:02	2024-09-4	Show	GitHub Exploit DB Packet Storm

314970	5.5	MEDIUM Local	samsung	android	Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.	NVD-CWE-Other	CVE-2024-34646	2024-09-6 03:01	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed