Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1041	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43190	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1042	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43191	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1043	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43192	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1044	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-43193	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1045	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43194	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1046	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43195	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1047	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-43196	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1048	9.1	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43197	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1049	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-43198	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

1050	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43199	2026-05-13 10:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1541	-		-	-	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating…	CWE-770 CWE-1322 Allocation of Resources Without Limits or Throttling	CVE-2026-42256	2026-05-14 00:39	2026-05-10	Show	GitHub Exploit DB Packet Storm

1542	-		-	-	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is…	CWE-77 CWE-93 Command Injection CRLF Injection	CVE-2026-42257	2026-05-14 00:39	2026-05-10	Show	GitHub Exploit DB Packet Storm

1543	-		-	-	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection…	CWE-77 CWE-93 Command Injection CRLF Injection	CVE-2026-42258	2026-05-14 00:39	2026-05-10	Show	GitHub Exploit DB Packet Storm

1544	8.0	HIGH Network	-	-	Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification stripped from the Fi…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-41431	2026-05-14 00:37	2026-05-12	Show	GitHub Exploit DB Packet Storm

1545	2.4	LOW Network	-	-	Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same r…	CWE-20 Improper Input Validation	CVE-2026-44658	2026-05-14 00:37	2026-05-12	Show	GitHub Exploit DB Packet Storm

1546	4.7	MEDIUM Network	-	-	Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address bar and shows only the attacker-controlled prefix of the subdomain, hiding the a…	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-44659	2026-05-14 00:37	2026-05-12	Show	GitHub Exploit DB Packet Storm

1547	-		-	-	An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections …	CWE-502 CWE-918 Deserialization of Untrusted Data Server-Side Request Forgery (SSRF)	CVE-2026-3048	2026-05-14 00:36	2026-05-12	Show	GitHub Exploit DB Packet Storm

1548	-		-	-	An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via …	CWE-79 Cross-site Scripting	CVE-2026-7308	2026-05-14 00:36	2026-05-12	Show	GitHub Exploit DB Packet Storm

1549	-		-	-	Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /collection/. Exploi…	CWE-79 Cross-site Scripting	CVE-2026-3319	2026-05-14 00:36	2026-05-12	Show	GitHub Exploit DB Packet Storm

1550	-		-	-	Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /product/. Exploitat…	CWE-79 Cross-site Scripting	CVE-2026-3320	2026-05-14 00:36	2026-05-12	Show	GitHub Exploit DB Packet Storm