Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2411	4.7	警告 Network	web2py	web2py	web2pyにおけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2026-25198	2026-02-5 14:03	2026-02-5	Show	GitHub Exploit DB Packet Storm

2412	-	-	RISS SRL	MOMA Seismic Station	RISS SRL製MOMA Seismic Stationにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1632	2026-02-5 12:32	2026-02-4	Show	GitHub Exploit DB Packet Storm

2413	-	-	Avation	Avation Light Engine Pro	Avation Light Engine Proにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1341	2026-02-5 12:32	2026-02-4	Show	GitHub Exploit DB Packet Storm

2414	7.5	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	D151 D301	Shenzhen Tenda Technology Co.,Ltd.のD151等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2021-47802	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2415	7.5	重要 Network	yodinfo	Mini Mouse	yodinfoのMini Mouseにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47849	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2416	7.5	重要 Network	yodinfo	Mini Mouse	yodinfoのMini Mouseにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47850	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2417	9.8	緊急 Network	yodinfo	Mini Mouse	yodinfoのMini MouseにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-47851	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2418	7.5	重要 Network	クアルコム	MSM8608 ファームウェア APQ8017 ファームウェア qcn6224 ファームウェア Snapdragon 210 Processor Firmware fastconnect 7800 ファームウェア snapdragon 425 mobile …	クアルコムのQualcomm 205 Mobile Platform ファームウェア等の複数製品におけるバッファオーバーリードの脆弱性	CWE-126 バッファオーバーリード	CVE-2024-23358	2026-02-4 18:42	2024-09-2	Show	GitHub Exploit DB Packet Storm

2419	9.8	緊急 Network	Honeywell International Inc.	LenelS2 NetBox	Honeywell International Inc.のLenelS2 NetBoxにおけるハードコードされたパスワードの使用に関する脆弱性	CWE-259 パスワードがハードコーディングされている	CVE-2024-2420	2026-02-4 18:42	2024-05-30	Show	GitHub Exploit DB Packet Storm

2420	9.8	緊急 Network	Honeywell International Inc.	LenelS2 NetBox	Honeywell International Inc.のLenelS2 NetBoxにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-2421	2026-02-4 18:42	2024-05-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
161	5.5	MEDIUM Local	-	-	UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-7375	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

162	5.5	MEDIUM Local	-	-	Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-476 NULL Pointer Dereference	CVE-2026-7376	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

163	5.5	MEDIUM Local	-	-	Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-122 Heap-based Buffer Overflow	CVE-2026-7378	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

164	5.5	MEDIUM Local	-	-	Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-7379	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

165	7.3	HIGH Network	-	-	The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by … New	CWE-149 Improper Neutralization of Quoting Syntax	CVE-2026-42511	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

166	7.4	HIGH Network	-	-	In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server New	CWE-59 Link Following	CVE-2026-41882	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

167	6.5	MEDIUM Network	-	-	A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully pr… New	CWE-400 Uncontrolled Resource Consumption	CVE-2026-22740	2026-05-1 00:11	2026-04-29	Show	GitHub Exploit DB Packet Storm

168	3.1	LOW Network	-	-	Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the ap… New	CWE-524 Use of Cache Containing Sensitive Information	CVE-2026-22741	2026-05-1 00:11	2026-04-29	Show	GitHub Exploit DB Packet Storm

169	5.3	MEDIUM Network	-	-	Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: … New	CWE-400 Uncontrolled Resource Consumption	CVE-2026-22745	2026-05-1 00:11	2026-04-29	Show	GitHub Exploit DB Packet Storm

170	4.3	MEDIUM Network	-	-	A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths. New	CWE-862 Missing Authorization	CVE-2026-42519	2026-05-1 00:11	2026-04-29	Show	GitHub Exploit DB Packet Storm