Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3061 8.1 重要
Network 		Qode Interactive Backpack Traveler Qode InteractiveのWordPress用Backpack TravelerにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-39490 2026-02-2 19:19 2025-05-23 Show GitHub Exploit DB Packet Storm
3062 9.8 緊急
Network 		Qode Interactive Wilmer Qode InteractiveのWordPress用WilmerにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-39494 2026-02-2 19:19 2025-05-23 Show GitHub Exploit DB Packet Storm
3063 6.1 警告
Network 		IDI Eikon Governalia IDI EikonのGovernaliaにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-40700 2026-02-2 19:19 2025-12-2 Show GitHub Exploit DB Packet Storm
3064 6.5 警告
Network 		GAMS access control system GAMSのaccess control systemにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2025-41086 2026-02-2 19:19 2025-12-2 Show GitHub Exploit DB Packet Storm
3065 9.8 緊急
Network 		Nugine wgp Nugineのwgpにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-47735 2026-02-2 19:19 2025-05-9 Show GitHub Exploit DB Packet Storm
3066 9.8 緊急
Network 		Geoffroy Couprie trailer Geoffroy Couprieのtrailerにおけるメモリ管理ルーチンの不一致に関する脆弱性 CWE-762
メモリ管理ルーチンの不一致 		CVE-2025-47737 2026-02-2 19:19 2025-05-9 Show GitHub Exploit DB Packet Storm
3067 9.8 緊急
Network 		tickbh Process Lock tickbhのProcess Lockにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-48751 2026-02-2 19:19 2025-05-24 Show GitHub Exploit DB Packet Storm
3068 9.8 緊急
Network 		Andrei Odintsov Process Sync Andrei OdintsovのProcess Syncにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2025-48752 2026-02-2 19:19 2025-05-24 Show GitHub Exploit DB Packet Storm
3069 9.8 緊急
Network 		Obsidian Dynamics Anode Obsidian DynamicsのAnodeにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-48753 2026-02-2 19:19 2025-05-24 Show GitHub Exploit DB Packet Storm
3070 7.5 重要
Network 		Fractal Fir(Micha? Kostrubiec) memory_pages Fractal Fir(Micha? Kostrubiec)のmemory_pagesにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2025-48754 2026-02-2 19:19 2025-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 - - - Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file… New - CVE-2025-70067 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
182 6.5 MEDIUM
Adjacent 		amazon freertos-plus-tcp Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC ad… Update CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-7422 2026-05-4 22:43 2026-04-30 Show GitHub Exploit DB Packet Storm
183 6.5 MEDIUM
Network 		devolutions devolutions_server Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation content from unauthorized vaults via a crafted API request. … Update CWE-862
 Missing Authorization 		CVE-2026-6706 2026-05-4 22:37 2026-04-28 Show GitHub Exploit DB Packet Storm
184 6.5 MEDIUM
Adjacent 		amazon freertos-plus-tcp Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing pi… Update CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-7423 2026-05-4 22:35 2026-04-30 Show GitHub Exploit DB Packet Storm
185 8.1 HIGH
Adjacent 		amazon freertos-plus-tcp Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, an… Update CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-7424 2026-05-4 22:22 2026-04-30 Show GitHub Exploit DB Packet Storm
186 9.1 CRITICAL
Network 		- - Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and… New CWE-125
Out-of-bounds Read 		CVE-2026-7482 2026-05-4 22:16 2026-05-4 Show GitHub Exploit DB Packet Storm
187 6.5 MEDIUM
Adjacent 		amazon freertos-plus-tcp Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash… Update CWE-125
Out-of-bounds Read 		CVE-2026-7425 2026-05-4 22:12 2026-04-30 Show GitHub Exploit DB Packet Storm
188 8.1 HIGH
Adjacent 		amazon freertos-plus-tcp Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by… Update CWE-787
 Out-of-bounds Write 		CVE-2026-7426 2026-05-4 22:12 2026-04-30 Show GitHub Exploit DB Packet Storm
189 9.1 CRITICAL
Network 		rti connext_professional Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Serialized Data External Linking.This issue affects Connext Professional: from 7.4.… Update CWE-611
XXE 		CVE-2025-14543 2026-05-4 22:02 2026-05-1 Show GitHub Exploit DB Packet Storm
190 7.2 HIGH
Network 		- - Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue aff… New CWE-94
Code Injection 		CVE-2026-3120 2026-05-4 21:16 2026-05-4 Show GitHub Exploit DB Packet Storm