Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
611 8.1 重要
Adjacent
Anviz Global Crosschex Standard Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性 New CWE-940
通信チャネルの送信元の不適切な検証
CVE-2026-40434 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
612 7.5 重要
Network
Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware
Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-40461 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
613 5.3 警告
Network
asrmicro ASR1901 Firmware
ASR1903 Firmware
asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-42800 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
614 7.5 重要
Network
OpenStack Ironic Python Agent OpenStackのIronic Python Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-43003 2026-05-7 11:29 2026-05-1 Show GitHub Exploit DB Packet Storm
615 5.9 警告
Network
PerlDancer Dancer::Session::Abstract PerlDancerのDancer::Session::Abstractにおける複数の脆弱性 New CWE-338
CWE-340
CVE-2026-5080 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
616 5.5 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)におけるバッファエラーの脆弱性 New CWE-119
バッファエラー
CVE-2026-5475 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
617 4.6 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 New CWE-189
CWE-190
CVE-2026-5476 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
618 7.8 重要
Local
IBM IBM Turbonomic Prometurbo agent IBMのIBM Turbonomic Prometurbo agentにおける権限管理に関する脆弱性 New CWE-269
CWE-noinfo
CVE-2026-6389 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
619 5.5 警告
Local
レッドハット multicluster engine for Kubernetes レッドハットのmulticluster engine for Kubernetesにおける重要な情報の平文保存に関する脆弱性 New CWE-312
重要な情報の平文保存
CVE-2026-7163 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
620 7.2 重要
Network
Amazon.com, Inc. Amazon ECS container agent Amazon.com, Inc.のAmazon ECS container agentにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-7461 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312741 8.8 HIGH
Network
apache hertzbeat Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0. CWE-502
 Deserialization of Untrusted Data
CVE-2024-42362 2024-08-28 22:49 2024-08-21 Show GitHub Exploit DB Packet Storm
312742 9.8 CRITICAL
Network
apache hertzbeat Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/{monitorId}/metric/{metricFull} endpoint to download job metrics. In the process, it exec… CWE-89
SQL Injection
CVE-2024-42361 2024-08-28 22:49 2024-08-21 Show GitHub Exploit DB Packet Storm
312743 - - - Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can impact the … - CVE-2024-45049 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312744 - - - Meshtastic device firmware is a firmware for meshtastic devices to run an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic device firmware … - CVE-2024-45038 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312745 - - - A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extens… - CVE-2024-5814 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312746 - - - An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with… - CVE-2024-5288 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312747 - - - The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormati… - CVE-2024-45037 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312748 - - - Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The divisio… - CVE-2024-1544 2024-08-28 21:57 2024-08-28 Show GitHub Exploit DB Packet Storm
312749 - - - An authenticated user can download sensitive files from NX, EX, FX, AX, IVX, and CMS using path traversal for the URL of network anomaly download_artifact. CWE-35
 Path Traversal: '.../...//'
CVE-2024-7608 2024-08-28 18:15 2024-08-27 Show GitHub Exploit DB Packet Storm
312750 - - - Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot… CWE-1392
 Use of Default Credentials
CVE-2024-39584 2024-08-28 15:15 2024-08-28 Show GitHub Exploit DB Packet Storm