Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 6.1 警告
Network 		opennebula opennebula opennebulaにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-56534 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2 6.1 警告
Network 		opennebula opennebula opennebulaにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-56535 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
3 6.1 警告
Network 		opennebula opennebula opennebulaにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-56536 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
4 6.1 警告
Network 		opennebula opennebula opennebulaにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-56537 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
5 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2025-59028 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
6 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2025-59032 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
7 5.5 警告
Local 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 New CWE-124
CWE-191
CVE-2026-26204 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
8 6.5 警告
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 New CWE-307
CWE-362
CWE-367
CVE-2026-26206 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
9 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-27857 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
10 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-27858 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312841 - - - In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages On big endian architectures, it is possible to run … - CVE-2024-43816 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312842 - - - In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory through the payload field when running AE… - CVE-2024-43815 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312843 - - - The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'couponId' parameter of the 'recreate_stripe_subscription' REST API endpoint in versions up to, and including, 1.4.4 due … - CVE-2023-3419 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312844 7.2 HIGH
Network 		- - The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the 'create_stripe_subscription' REST API endpoint in versions up to, and including,… - CVE-2023-3416 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312845 - - - A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manip… CWE-404
 Improper Resource Shutdown or Release 		CVE-2024-7887 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312846 - - - In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1… - CVE-2024-42322 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312847 - - - In the Linux kernel, the following vulnerability has been resolved: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE The following splat is easy to reproduce upstream as well as in -stable kernels. … - CVE-2024-42321 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312848 - - - In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() When mtk-cmdq unbinds, a WARN_ON message w… - CVE-2024-42319 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312849 - - - In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core so set_ownership() can safely skip sett… - CVE-2024-42312 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
312850 - - - In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while load… - CVE-2024-42306 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm