Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
881	5.5	警告 Local	Foxit	pdf editor pdf reader	Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-5942	2026-05-1 10:43	2026-04-27	Show	GitHub Exploit DB Packet Storm

882	7.8	重要 Local	Foxit	pdf editor pdf reader	Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-5943	2026-05-1 10:43	2026-04-27	Show	GitHub Exploit DB Packet Storm

883	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	ch22 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-5962	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

884	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	fix: isolate Test.exec_code() namespace and subprocess to prevent CWE-95 code injection via globals() leak by sebastiondev&n…	CVE-2026-5970	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

885	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-94 CWE-95	CVE-2026-5971	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

886	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-77 CWE-78	CVE-2026-5972	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

887	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-77 CWE-78	CVE-2026-5973	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

888	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-77 CWE-78	CVE-2026-5974	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

889	8.8	重要 Network	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおける複数の脆弱性	CWE-119 CWE-120	CVE-2026-5979	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

890	8.8	重要 Network	D-Link Systems, Inc.	DIR-605L ファームウェア	D-Link CorporationのDIR-605L ファームウェアにおける複数の脆弱性	CWE-119 CWE-120	CVE-2026-5980	2026-05-1 10:43	2026-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312961	-		-	-	A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.	-	CVE-2024-39841	2024-08-24 03:46	2024-08-24	Show	GitHub Exploit DB Packet Storm

312962	-		-	-	A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.	-	CVE-2024-33853	2024-08-24 03:46	2024-08-24	Show	GitHub Exploit DB Packet Storm

312963	-		-	-	A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.	-	CVE-2024-33852	2024-08-24 03:46	2024-08-24	Show	GitHub Exploit DB Packet Storm

312964	8.8	HIGH Network	siemens	ruggedcom_rm1224_lte\(4g\)_eu_firmware ruggedcom_rm1224_lte\(4g\)_nam_firmware scalance_m804pb_firmware scalance_m826-2_shdsl-router_firmware scalance_m874-2_firmware scalance_m874-3_f…	A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB…	NVD-CWE-noinfo	CVE-2024-41976	2024-08-24 03:40	2024-08-13	Show	GitHub Exploit DB Packet Storm

312965	8.0	HIGH Network	siemens	ruggedcom_rm1224_lte\(4g\)_eu_firmware ruggedcom_rm1224_lte\(4g\)_nam_firmware scalance_m804pb_firmware scalance_m826-2_shdsl-router_firmware scalance_m874-2_firmware scalance_m874-3_f…	A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB…	NVD-CWE-Other	CVE-2024-41977	2024-08-24 03:39	2024-08-13	Show	GitHub Exploit DB Packet Storm

312966	-		-	-	DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.	-	CVE-2024-42636	2024-08-24 03:35	2024-08-24	Show	GitHub Exploit DB Packet Storm

312967	-		-	-	publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData	-	CVE-2024-42523	2024-08-24 03:35	2024-08-24	Show	GitHub Exploit DB Packet Storm

312968	-		-	-	A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attac…	-	CVE-2024-42915	2024-08-24 03:35	2024-08-24	Show	GitHub Exploit DB Packet Storm

312969	-		-	-	DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the actio…	-	CVE-2024-43027	2024-08-24 03:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

312970	7.5	HIGH Network	axios	axios	axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-39338	2024-08-24 03:35	2024-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed