Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
961 7.8 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40915 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
962 5.5 警告
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-40916 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
963 7.1 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40917 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
964 5.5 警告
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性 CWE-131
正しくないバッファサイズ計算 		CVE-2026-40918 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
965 5.5 警告
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-40919 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
966 5.9 警告
Network 		opentelemetry opentelemetry opentelemetryにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41078 2026-04-30 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
967 6.5 警告
Network 		Apache Software Foundation Apache Storm Apache Software FoundationのApache Stormにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-41081 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
968 7.5 重要
Network 		SQLAlchemy mako SQLAlchemyのmakoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41205 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
969 7.8 重要
Local 		Tommaso Bona (ParzivalHack) PySpector Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41206 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
970 6.1 警告
Network 		cure53 DOMPurify cure53のDOMPurifyにおける複数の脆弱性 CWE-183
CWE-79
CVE-2026-41240 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313191 - - - Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. - CVE-2024-34614 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313192 - - - Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. - CVE-2024-34613 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313193 - - - Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. - CVE-2024-34612 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313194 - - - Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. - CVE-2024-34611 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313195 - - - Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. - CVE-2024-34610 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313196 - - - Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34609 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313197 - - - Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34608 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313198 - - - Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34607 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313199 - - - Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34606 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
313200 - - - Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. - CVE-2024-34605 2024-08-7 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm