Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
451 5.9 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-5500 2026-04-30 12:24 2026-04-10 Show GitHub Exploit DB Packet Storm
452 8.1 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-5501 2026-04-30 12:24 2026-04-10 Show GitHub Exploit DB Packet Storm
453 9.1 緊急
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-5503 2026-04-30 12:24 2026-04-9 Show GitHub Exploit DB Packet Storm
454 9 緊急
Network 		craftycontrol crafty controller craftycontrolのcrafty controllerにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-5652 2026-04-30 12:24 2026-04-21 Show GitHub Exploit DB Packet Storm
455 7.5 重要
Network 		HashiCorp Vault HashiCorpのVaultにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-5807 2026-04-30 12:24 2026-04-17 Show GitHub Exploit DB Packet Storm
456 7.1 重要
Local 		radare radare2 radareのradare2におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6940 2026-04-30 12:24 2026-04-23 Show GitHub Exploit DB Packet Storm
457 7.8 重要
Local 		radare radare2 radareのradare2における複数の脆弱性 CWE-22
CWE-59
CVE-2026-6941 2026-04-30 12:24 2026-04-23 Show GitHub Exploit DB Packet Storm
458 7.5 重要
Network 		Sgbett BSV Ruby SDK (bsv-sdk) SgbettのBSV Ruby SDK (bsv-sdk)における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-40069 2026-04-30 12:18 2026-04-9 Show GitHub Exploit DB Packet Storm
459 5.3 警告
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-40431 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
460 9.8 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40620 2026-04-30 12:18 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312881 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node The pdev->dev.of_node can be NULL if the "serial" node is absent. Add a NULL ch… CWE-476
 NULL Pointer Dereference 		CVE-2024-42248 2024-08-9 05:55 2024-08-8 Show GitHub Exploit DB Packet Storm
312882 9.8 CRITICAL
Network 		tenda i22_firmware A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the file /goform/apPortalOneKeyAuth. The manipu… CWE-787
 Out-of-bounds Write 		CVE-2024-7583 2024-08-9 05:54 2024-08-8 Show GitHub Exploit DB Packet Storm
312883 7.5 HIGH
Network 		djangoproject django An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number i… NVD-CWE-noinfo
CVE-2024-41989 2024-08-9 05:35 2024-08-8 Show GitHub Exploit DB Packet Storm
312884 - - - Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. - CVE-2024-7530 2024-08-9 03:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312885 - - - A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used. - CVE-2024-41910 2024-08-9 03:15 2024-08-6 Show GitHub Exploit DB Packet Storm
312886 - - - A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter. - CVE-2024-41238 2024-08-9 02:35 2024-08-9 Show GitHub Exploit DB Packet Storm
312887 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-7123 2024-08-9 02:15 2024-08-9 Show GitHub Exploit DB Packet Storm
312888 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-7121 2024-08-9 02:15 2024-08-9 Show GitHub Exploit DB Packet Storm
312889 - - - Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1,… - CVE-2024-7522 2024-08-9 01:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312890 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via … - CVE-2024-41239 2024-08-9 01:15 2024-08-8 Show GitHub Exploit DB Packet Storm