Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3351	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-53530	2026-01-28 12:39	2025-10-1	Show	GitHub Exploit DB Packet Storm

3352	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2023-53532	2026-01-28 12:39	2025-10-1	Show	GitHub Exploit DB Packet Storm

3353	7.5	重要 Network	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-39564	2026-01-28 12:39	2025-02-5	Show	GitHub Exploit DB Packet Storm

3354	4.9	警告 Network	HGiga	isherlock	HGigaのisherlockにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-4296	2026-01-28 12:39	2024-04-29	Show	GitHub Exploit DB Packet Storm

3355	4.9	警告 Network	HGiga	isherlock	HGigaのisherlockにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-4297	2026-01-28 12:39	2024-04-29	Show	GitHub Exploit DB Packet Storm

3356	9.8	緊急 Network	Joom Sky	JS Help Desk	Joom SkyのWordPress用JS Help Deskにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-43274	2026-01-28 12:39	2024-11-1	Show	GitHub Exploit DB Packet Storm

3357	5.8	警告 Network	ジュニパーネットワークス	Junos OS Evolved	ジュニパーネットワークスのJunos OS Evolvedにおける例外的な状態の処理に関する脆弱性	CWE-755 例外的な状態における不適切な処理	CVE-2024-47489	2026-01-28 12:39	2024-10-11	Show	GitHub Exploit DB Packet Storm

3358	8.2	重要 Network	ジュニパーネットワークス	Junos OS Evolved	ジュニパーネットワークスのJunos OS Evolvedにおける意図するエンドポイントとの通信チャネルの制限に関する脆弱性	CWE-923 意図するエンドポイントとの通信チャネルの不適切な制限	CVE-2024-47490	2026-01-28 12:39	2024-10-11	Show	GitHub Exploit DB Packet Storm

3359	5.9	警告 Network	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における例外的な状態の処理に関する脆弱性	CWE-755 例外的な状態における不適切な処理	CVE-2024-47491	2026-01-28 12:39	2024-10-11	Show	GitHub Exploit DB Packet Storm

3360	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-47493	2026-01-28 12:39	2024-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
21	9.1	CRITICAL Network	-	-	An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if th… New	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2026-34408	2026-05-7 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

22	-		-	-	In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to c… New	CWE-1333 Inefficient Regular Expression Complexity	CVE-2026-33079	2026-05-7 03:16	2026-05-7	Show	GitHub Exploit DB Packet Storm

23	-		-	-	### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`. This allows any authenticate… New	CWE-89 SQL Injection	CVE-2026-29090	2026-05-7 03:16	2026-05-7	Show	GitHub Exploit DB Packet Storm

24	7.5	HIGH Network	-	-	An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Mod… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2025-66369	2026-05-7 03:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

25	8.1	HIGH Network	dlink	m60_firmware	A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attac… Update	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2026-7554	2026-05-7 03:10	2026-05-1	Show	GitHub Exploit DB Packet Storm

26	7.5	HIGH Network	apache	opennlp	OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader methods getOut… New	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-42440	2026-05-7 03:09	2026-05-5	Show	GitHub Exploit DB Packet Storm

27	7.5	HIGH Network	n8n	n8n	n8n is an open source workflow automation platform. Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify whether the authenticated caller was authorized to use … New	CWE-862 Missing Authorization	CVE-2026-42226	2026-05-7 03:09	2026-05-5	Show	GitHub Exploit DB Packet Storm

28	6.5	MEDIUM Network	n8n	n8n	n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with a valid API key scoped to variable:list could read variables from projec… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-42227	2026-05-7 03:08	2026-05-5	Show	GitHub Exploit DB Packet Storm

29	6.5	MEDIUM Network	n8n	n8n	n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify tha… New	CWE-862 Missing Authorization	CVE-2026-42228	2026-05-7 03:08	2026-05-5	Show	GitHub Exploit DB Packet Storm

30	9.8	CRITICAL Network	n8n	n8n	n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select operation allowed user-controlled input passed into the… New	CWE-89 SQL Injection	CVE-2026-42233	2026-05-7 03:07	2026-05-5	Show	GitHub Exploit DB Packet Storm