Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2981 8.8 重要
Network 		Dokploy Dokploy Dokployにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-24840 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2982 9.9 緊急
Network 		Dokploy Dokploy DokployにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-24841 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2983 - - 三菱電機 MELSEC iQ-R シリーズ 三菱電機製FA製品における専用プロトコル通信およびSLMP通信からの入力内容に対する検証不備の脆弱性 CWE-1284
入力で指定された数量の不適切な検証 		CVE-2025-15080 2026-02-6 09:36 2026-02-5 Show GitHub Exploit DB Packet Storm
2984 7.2 重要
Network 		Google Google Security Operations SOAR GoogleのGoogle Security Operations SOARにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2025-13428 2026-02-5 15:51 2025-12-9 Show GitHub Exploit DB Packet Storm
2985 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2025-40536 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2986 7.5 重要
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2025-40537 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2987 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40551 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2988 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40552 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2989 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40553 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2990 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40554 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
741 7.3 HIGH
Network 		- - A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sq… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8098 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
742 6.3 MEDIUM
Network 		- - A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injec… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8097 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
743 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-34429. Reason: This candidate is a duplicate of CVE-2026-34429. Notes: All CVE users should reference CVE-2026-344… New - CVE-2026-44365 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
744 7.8 HIGH
Local 		- - GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitP… New CWE-94
Code Injection 		CVE-2026-44244 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
745 7.7 HIGH
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastR… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41905 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
746 7.1 HIGH
Local 		gitpython_project gitpython GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application … New CWE-22
Path Traversal 		CVE-2026-44243 2026-05-8 06:12 2026-05-8 Show GitHub Exploit DB Packet Storm
747 5.3 MEDIUM
Network 		- - ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an att… New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-42241 2026-05-8 05:37 2026-05-8 Show GitHub Exploit DB Packet Storm
748 - - - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid o… New CWE-295
Improper Certificate Validation  		CVE-2026-42225 2026-05-8 05:36 2026-05-8 Show GitHub Exploit DB Packet Storm
749 8.1 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.… New CWE-1004
 Sensitive Cookie Without 'HttpOnly' Flag 		CVE-2026-42239 2026-05-8 05:35 2026-05-8 Show GitHub Exploit DB Packet Storm
750 7.6 HIGH
Network 		- - manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. F… New CWE-266
 Incorrect Privilege Assignment 		CVE-2026-43510 2026-05-8 05:32 2026-05-8 Show GitHub Exploit DB Packet Storm