Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2811 7.5 重要
Network 		OpenWrt Project
メディアテック		 Software Development Kit
openwrt
nbiot sdk 		メディアテック等の複数ベンダの製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-20419 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
2812 7.5 重要
Network 		メディアテック nr16
nr17
NR15
NR17R 		メディアテックのNR15等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-20420 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
2813 7.5 重要
Network 		メディアテック NR15 メディアテックのNR15における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-20421 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
2814 7.5 重要
Network 		メディアテック nr16
nr17
NR15
NR17R 		メディアテックのNR15等の複数製品における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-20422 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
2815 5.1 警告
Local 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 CWE-269
不適切な権限管理 		CVE-2026-21223 2026-02-5 15:44 2026-01-16 Show GitHub Exploit DB Packet Storm
2816 9.8 緊急
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps Elevation of Privilege Vulnerability CWE-22
パス・トラバーサル 		CVE-2026-21227 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
2817 6.1 警告
Network 		マイクロソフト Microsoft Account Microsoft Account Spoofing Vulnerability CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21264 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
2818 7.4 重要
Network 		マイクロソフト Azure Data Explorer Azure Data Explorer Information Disclosure Vulnerability CWE-200
情報漏えい 		CVE-2026-21524 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
2819 6.1 警告
Network 		Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21663 2026-02-5 15:44 2026-01-20 Show GitHub Exploit DB Packet Storm
2820 6.1 警告
Network 		Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21664 2026-02-5 15:44 2026-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.3 MEDIUM
Network 		- - A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpoint. Such manipulation… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-7709 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
622 7.3 HIGH
Network 		- - A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Perform… New CWE-287
Improper Authentication 		CVE-2026-7710 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
623 6.5 MEDIUM
Network 		- - A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This … New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-7714 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
624 7.3 HIGH
Network 		- - A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpo… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-7733 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
625 6.3 MEDIUM
Network 		- - A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of the component Kobo… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-7713 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
626 4.3 MEDIUM
Network 		- - A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_authentication of the file /src/udm/nudr-handler.c of the component authentication… New CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7779 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
627 4.3 MEDIUM
Network 		- - A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /src/udm/udm-sm.c of the component smf-registrations Endpoint. … New CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7780 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
628 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-handler.c of the compo… New CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7781 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
629 6.3 MEDIUM
Network 		- - A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The mani… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7782 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
630 - - - An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL execution in the backend. … Update CWE-89
SQL Injection 		CVE-2026-5394 2026-05-6 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm