Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2061	5.5	警告 Local	Igor Arsenin	TaskInfo	Igor ArseninのTaskInfoにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2019-25667	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2062	8.2	重要 Network	PHP Scripts Mall Pvt Ltd	News Website Script	PhpscriptsmallのNews Website ScriptにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25668	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2063	7.5	重要 Network	Novell	eDirectory	ARCA SOLUTIONS INC.のeDirectoryにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25675	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2064	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2065	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2066	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2067	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2068	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

2069	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

2070	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
421	7.7	HIGH Network	-	-	Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before … New	CWE-20 Improper Input Validation	CVE-2026-5174	2026-05-1 02:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

422	7.5	HIGH Network	-	-	CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2. New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2025-51846	2026-05-1 02:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

423	9.8	CRITICAL Network	-	-	Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and in… New	CWE-78 OS Command	CVE-2025-71284	2026-05-1 02:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

424	7.5	HIGH Network	-	-	Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet interface at the XML-RPC endpoint that allows unauthenticated remote attackers t… New	CWE-22 Path Traversal	CVE-2022-50992	2026-05-1 02:19	2026-05-1	Show	GitHub Exploit DB Packet Storm

425	9.8	CRITICAL Network	-	-	Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicio… New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2022-50993	2026-05-1 02:19	2026-05-1	Show	GitHub Exploit DB Packet Storm

426	8.8	HIGH Network	-	-	A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0. The device does not implement CSRF protection mechanisms such as anti-CSRF… New	CWE-352 Origin Validation Error	CVE-2026-36960	2026-05-1 02:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

427	9.8	CRITICAL Network	-	-	cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. New	CWE-306 Missing Authentication for Critical Function	CVE-2026-41940	2026-05-1 02:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

428	-		-	-	In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the pee… New	-	CVE-2026-31692	2026-05-1 02:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

429	-		-	-	In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… New	-	CVE-2026-31693	2026-05-1 02:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

430	-		-	-	In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XENVER_build_id) is neither NUL t… New	-	CVE-2026-31786	2026-05-1 02:11	2026-04-30	Show	GitHub Exploit DB Packet Storm