Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4471 8.8 重要
Network
Electron electron Electronのelectronにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-34772 2026-04-24 11:44 2026-04-4 Show GitHub Exploit DB Packet Storm
4472 7.5 重要
Network
Electron electron Electronのelectronにおける複数の脆弱性 CWE-20
CWE-74
CWE-74
CVE-2026-34773 2026-04-24 11:44 2026-04-4 Show GitHub Exploit DB Packet Storm
4473 8.1 重要
Network
Electron electron Electronのelectronにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-34774 2026-04-24 11:44 2026-04-4 Show GitHub Exploit DB Packet Storm
4474 9.8 緊急
Network
Electron electron Electronのelectronにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類
CVE-2026-34775 2026-04-24 11:44 2026-04-4 Show GitHub Exploit DB Packet Storm
4475 9.8 緊急
Network
Bruno Software Inc. Bruno Bruno Software Inc.のBrunoにおける複数の脆弱性 CWE-494
CWE-506
CVE-2026-34841 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
4476 5.3 警告
Network
Discourse Discourse Discourseにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34947 2026-04-24 11:44 2026-04-3 Show GitHub Exploit DB Packet Storm
4477 9.1 緊急
Network
nearform fast-jwt nearformのfast-jwtにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2026-34950 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
4478 4.3 警告
Network
Plunk Plunk PlunkにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-34975 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
4479 10 緊急
Network
dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
4480 8.2 重要
Local
Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
931 8.2 HIGH
Network
- - MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email param… New CWE-89
SQL Injection
CVE-2018-25372 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
932 8.4 HIGH
Local
- - SocuSoft DVD Photo Slideshow Professional 8.07 contains a stack-based buffer overflow vulnerability in the registration name field that allows local attackers to execute arbitrary code by exploiting … New CWE-121
Stack-based Buffer Overflow
CVE-2018-25373 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
933 7.5 HIGH
Network
- - Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers … New CWE-22
Path Traversal
CVE-2018-25374 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
934 8.4 HIGH
Local
- - SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception ha… New CWE-121
Stack-based Buffer Overflow
CVE-2018-25375 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
935 8.4 HIGH
Local
- - Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling… New CWE-120
Classic Buffer Overflow
CVE-2018-25376 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
936 8.4 HIGH
Local
- - Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception ha… New CWE-120
Classic Buffer Overflow
CVE-2018-25377 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
937 6.2 MEDIUM
Local
- - Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can crea… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2018-25378 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
938 8.2 HIGH
Network
- - Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attacke… New CWE-89
SQL Injection
CVE-2018-25379 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
939 7.1 HIGH
Network
- - Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_pid_id, and filter_s… New CWE-89
SQL Injection
CVE-2018-25380 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
940 7.1 HIGH
Network
- - Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can injec… New CWE-89
SQL Injection
CVE-2018-25381 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm