Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
731	4.3	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44441	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

732	9.9	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-44442	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

733	6.5	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-44445	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

734	7.5	重要 Network	Frappe	ERPNext	FrappeのERPNextにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-44446	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

735	7.5	重要 Network	Frappe	ERPNext	FrappeのERPNextにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-44447	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

736	5.4	警告 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける解釈の競合に関する脆弱性	CWE-436 解釈の競合	CVE-2026-44576	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

737	8.6	重要 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44578	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

738	7.5	重要 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-44579	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

739	6.1	警告 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-44580	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

740	4.7	警告 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-44581	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311631	5.4	MEDIUM Network	gitlab	gitlab	A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When add…	CWE-79 Cross-site Scripting	CVE-2024-6530	2024-10-17 01:53	2024-10-10	Show	GitHub Exploit DB Packet Storm

311632	6.7	MEDIUM Local	openatom	openharmony	in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.	CWE-416 Use After Free	CVE-2024-39831	2024-10-17 01:53	2024-10-8	Show	GitHub Exploit DB Packet Storm

311633	5.5	MEDIUM Local	openatom	openharmony	in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.	CWE-125 Out-of-bounds Read	CVE-2024-39806	2024-10-17 01:49	2024-10-8	Show	GitHub Exploit DB Packet Storm

311634	8.8	HIGH Network	dlink	dir-619l_firmware	A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formEasySetupWWConfig of the file /goform/formEasySetupWWConfig. The ma…	CWE-120 Classic Buffer Overflow	CVE-2024-9782	2024-10-17 01:44	2024-10-10	Show	GitHub Exploit DB Packet Storm

311635	4.8	MEDIUM Network	wikimedia	apex	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediaw…	CWE-79 Cross-site Scripting	CVE-2024-47840	2024-10-17 01:44	2024-10-5	Show	GitHub Exploit DB Packet Storm

311636	8.8	HIGH Network	dlink	dir-619l_firmware	A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the argum…	CWE-120 Classic Buffer Overflow	CVE-2024-9783	2024-10-17 01:43	2024-10-10	Show	GitHub Exploit DB Packet Storm

311637	6.1	MEDIUM Network	mediawiki	cargo	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue af…	CWE-79 Cross-site Scripting	CVE-2024-47847	2024-10-17 01:42	2024-10-5	Show	GitHub Exploit DB Packet Storm

311638	8.8	HIGH Network	mediawiki	cargo	Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.	CWE-352 Origin Validation Error	CVE-2024-47846	2024-10-17 01:42	2024-10-5	Show	GitHub Exploit DB Packet Storm

311639	-		-	-	On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a se…	-	CVE-2024-29155	2024-10-17 01:38	2024-10-17	Show	GitHub Exploit DB Packet Storm

311640	-		-	-	Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.	-	CVE-2024-9348	2024-10-17 01:38	2024-10-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed