Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3151 - - Apache Friends XAMPP Festo Didactic SE製MES PCにプリインストールされたXAMPPにおける複数の脆弱性 - - 2026-01-30 11:15 2026-01-29 Show GitHub Exploit DB Packet Storm
3152 8.8 重要
Network 		Google Google Chrome Google の Google Chrome における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2022-3655 2026-01-29 18:22 2022-10-25 Show GitHub Exploit DB Packet Storm
3153 9.8 緊急
Network 		ServiceNow Now Assist AI Agents
Virtual Agent API 		ServiceNowのNow Assist AI Agents等の複数製品における不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2025-12420 2026-01-29 16:03 2026-01-12 Show GitHub Exploit DB Packet Storm
3154 7.8 重要
Local 		ASUSTeK Computer Inc. myasus ASUSTeK Computer Inc.のmyasusにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2025-12793 2026-01-29 16:03 2026-01-6 Show GitHub Exploit DB Packet Storm
3155 5.9 警告
Network 		ASUSTOR Inc. data master ASUSTOR Inc.のdata masterにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2025-13052 2026-01-29 16:03 2025-12-12 Show GitHub Exploit DB Packet Storm
3156 3.7 低
Network 		ASUSTOR Inc. data master ASUSTOR Inc.のdata masterにおける重要なデータの暗号化の欠如に関する脆弱性 CWE-311
重要なデータの暗号化の欠如 		CVE-2025-13053 2026-01-29 16:03 2025-12-12 Show GitHub Exploit DB Packet Storm
3157 6.5 警告
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-Other
その他 		CVE-2025-47906 2026-01-29 16:03 2025-09-18 Show GitHub Exploit DB Packet Storm
3158 7.8 重要
Local 		Google Android GoogleのAndroidにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2025-48647 2026-01-29 16:03 2026-01-16 Show GitHub Exploit DB Packet Storm
3159 7.8 重要
Local 		Lenovo PCManager LenovoのPCManagerにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-8098 2026-01-29 16:03 2025-08-18 Show GitHub Exploit DB Packet Storm
3160 9.8 緊急
Network 		フォーティネット FortiProxy
FortiOS
FortiAnalyzer
FortiManager
Fortiweb 		フォーティネット等の複数ベンダの製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-24858 2026-01-29 16:03 2026-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 6.1 MEDIUM
Network 		geovision gv-lpc2011_firmware
gv-lpc2211_firmware 		Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an ar… New CWE-79
Cross-site Scripting 		CVE-2026-7371 2026-05-5 11:39 2026-05-4 Show GitHub Exploit DB Packet Storm
202 9.0 CRITICAL
Network 		geovision gv-vms_firmware A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker ca… New CWE-787
 Out-of-bounds Write 		CVE-2026-7372 2026-05-5 11:38 2026-05-4 Show GitHub Exploit DB Packet Storm
203 7.5 HIGH
Network 		apache http_server A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav o… New CWE-476
 NULL Pointer Dereference 		CVE-2026-29169 2026-05-5 11:36 2026-05-5 Show GitHub Exploit DB Packet Storm
204 6.5 MEDIUM
Network 		absolute secure_access CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and caus… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-40950 2026-05-5 11:32 2026-05-1 Show GitHub Exploit DB Packet Storm
205 4.4 MEDIUM
Local 		absolute secure_access CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service. Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-40949 2026-05-5 11:32 2026-05-1 Show GitHub Exploit DB Packet Storm
206 5.5 MEDIUM
Local 		absolute secure_access CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system. Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-33452 2026-05-5 11:31 2026-05-1 Show GitHub Exploit DB Packet Storm
207 7.8 HIGH
Local 		absolute secure_access CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and … Update CWE-125
Out-of-bounds Read 		CVE-2026-33451 2026-05-5 11:31 2026-05-1 Show GitHub Exploit DB Packet Storm
208 5.5 MEDIUM
Local 		absolute secure_access CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing… Update CWE-125
Out-of-bounds Read 		CVE-2026-33450 2026-05-5 11:31 2026-05-1 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network 		absolute secure_access CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-33449 2026-05-5 11:27 2026-05-1 Show GitHub Exploit DB Packet Storm
210 3.3 LOW
Local 		absolute secure_access CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump t… Update CWE-200
Information Exposure 		CVE-2026-33448 2026-05-5 11:27 2026-05-1 Show GitHub Exploit DB Packet Storm