Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
641 10 緊急
Network
Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-39906 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
642 10 緊急
Network
Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2026-39907 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
643 7.5 重要
Network
ZTE ZXESM iEMS ZTEのZXESM iEMSにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-40436 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
644 7.5 重要
Network
MIYAGAWA (Tatsuhiko Miyagawa) Starman MIYAGAWA (Tatsuhiko Miyagawa)のStarmanにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-40560 2026-05-8 12:10 2026-04-29 Show GitHub Exploit DB Packet Storm
645 5.3 警告
Network
Kazuho Oku (kazuho) Starlet Kazuho Oku (kazuho)のStarletにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-40561 2026-05-8 12:10 2026-05-3 Show GitHub Exploit DB Packet Storm
646 7.5 重要
Network
NERDVANA (Michael Conrad) Crypt-SecretBuffer NERDVANA (Michael Conrad)のCrypt-SecretBufferにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい
CVE-2026-5086 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
647 7.5 重要
Network
JDEGUEST (Jacques Deguest) Apache::API::Password JDEGUEST (Jacques Deguest)のApache::API::Passwordにおける暗号の脆弱な PRNG の使用に関する脆弱性 CWE-338
暗号における脆弱な PRNG の使用
CVE-2026-5088 2026-05-8 12:09 2026-04-15 Show GitHub Exploit DB Packet Storm
648 8.8 重要
Network
Cerberus, LLC Cerberus FTP Server CerberusのCerberus FTP Serverにおける安全に保持されない継承されたパーミッションに関する脆弱性 CWE-278
安全に保持されない継承されたパーミッション
CVE-2026-6265 2026-05-8 12:09 2026-04-27 Show GitHub Exploit DB Packet Storm
649 8.8 重要
Network
レッドハット Red Hat Enterprise Linux AI
InstructLab
レッドハットのRed Hat Enterprise Linux AI等の複数製品における信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-6859 2026-05-8 12:09 2026-04-22 Show GitHub Exploit DB Packet Storm
650 6.5 警告
Network
Amazon.com, Inc. tuftool
Amazon tough
Amazon.com, Inc.のAmazon tough等の複数製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-6966 2026-05-8 12:09 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312571 9.8 CRITICAL
Network
sourcefabric phoniebox RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php CWE-94
Code Injection
CVE-2024-41368 2024-09-5 01:28 2024-08-30 Show GitHub Exploit DB Packet Storm
312572 9.8 CRITICAL
Network
sourcefabric phoniebox RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php CWE-94
Code Injection
CVE-2024-41361 2024-09-5 01:28 2024-08-30 Show GitHub Exploit DB Packet Storm
312573 9.8 CRITICAL
Network
sourcefabric phoniebox RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php NVD-CWE-noinfo
CVE-2024-41369 2024-09-5 01:25 2024-08-30 Show GitHub Exploit DB Packet Storm
312574 9.8 CRITICAL
Network
nelzkie15 pet_shop_management_system A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of th… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8341 2024-09-5 01:16 2024-08-31 Show GitHub Exploit DB Packet Storm
312575 9.8 CRITICAL
Network
oretnom23 electric_billing_management_system A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the … CWE-89
SQL Injection
CVE-2024-8340 2024-09-5 01:14 2024-08-31 Show GitHub Exploit DB Packet Storm
312576 9.8 CRITICAL
Network
oretnom23 electric_billing_management_system A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of th… CWE-89
SQL Injection
CVE-2024-8339 2024-09-5 01:14 2024-08-31 Show GitHub Exploit DB Packet Storm
312577 9.8 CRITICAL
Network
oretnom23 music_gallery_site A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=delet… CWE-89
SQL Injection
CVE-2024-8336 2024-09-5 01:11 2024-08-30 Show GitHub Exploit DB Packet Storm
312578 - - - A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo,… - CVE-2024-44820 2024-09-5 01:09 2024-09-5 Show GitHub Exploit DB Packet Storm
312579 6.1 MEDIUM
Network
cdevroe unmark unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php. CWE-79
Cross-site Scripting
CVE-2024-41349 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm
312580 9.8 CRITICAL
Network
organizr organizr Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php. CWE-89
SQL Injection
CVE-2024-41372 2024-09-5 01:08 2024-08-30 Show GitHub Exploit DB Packet Storm