Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
481 9.8 緊急
Network 		Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-42779 2026-05-7 12:04 2026-05-1 Show GitHub Exploit DB Packet Storm
482 7.5 重要
Network 		レッドハット
GNOME Project		 gdk-pixbuf
Red Hat Enterprise Linux Server TUS
Red Hat Enterprise Linux Server AUS
Red Hat Enterprise Linux 		GNOME Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-5201 2026-05-7 12:04 2026-03-31 Show GitHub Exploit DB Packet Storm
483 5.5 警告
Local 		Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-5299 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
484 8.4 重要
Local 		FreeBSD FreeBSD FreeBSDにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-5398 2026-05-7 12:04 2026-04-22 Show GitHub Exploit DB Packet Storm
485 5.5 警告
Local 		Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-5401 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
486 8.8 重要
Network 		Wireshark Wireshark Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-5402 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
487 7.8 重要
Local 		Wireshark Wireshark Wiresharkにおける複数の脆弱性 New CWE-122
CWE-787
CVE-2026-5403 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
488 5.5 警告
Local 		Wireshark Wireshark Wiresharkにおける古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2026-5404 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
489 7.8 重要
Local 		Wireshark Wireshark Wiresharkにおける複数の脆弱性 New CWE-122
CWE-787
CVE-2026-5405 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
490 5.5 警告
Local 		Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-5406 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312741 9.0 CRITICAL
Network 		typecho typecho A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2024-35540 2024-08-22 01:05 2024-08-21 Show GitHub Exploit DB Packet Storm
312742 8.6 HIGH
Local 		scilico i-librarian Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component. CWE-79
Cross-site Scripting 		CVE-2024-40500 2024-08-22 01:05 2024-08-13 Show GitHub Exploit DB Packet Storm
312743 5.3 MEDIUM
Network 		matrix javascript_sdk matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's g… CWE-674
 Uncontrolled Recursion 		CVE-2024-42369 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
312744 8.8 HIGH
Network 		projectcapsule capsule Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e.,… CWE-863
 Incorrect Authorization 		CVE-2024-39690 2024-08-22 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
312745 5.4 MEDIUM
Network 		3ds 3dexperience A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execu… CWE-79
Cross-site Scripting 		CVE-2024-6378 2024-08-22 00:53 2024-08-20 Show GitHub Exploit DB Packet Storm
312746 9.8 CRITICAL
Network 		gotribe gotribe-admin A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-8003 2024-08-22 00:51 2024-08-20 Show GitHub Exploit DB Packet Storm
312747 9.8 CRITICAL
Network 		demozx gf_cms A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. T… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-8005 2024-08-22 00:49 2024-08-20 Show GitHub Exploit DB Packet Storm
312748 9.8 CRITICAL
Network 		newlib_project newlib An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-30949 2024-08-22 00:48 2024-08-21 Show GitHub Exploit DB Packet Storm
312749 - - - The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins - CVE-2024-6843 2024-08-22 00:35 2024-08-19 Show GitHub Exploit DB Packet Storm
312750 5.4 MEDIUM
Network 		adonesevangelista laravel_property_management_system A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/no… CWE-79
Cross-site Scripting 		CVE-2024-7945 2024-08-22 00:25 2024-08-20 Show GitHub Exploit DB Packet Storm