Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1211 - - IDrive Inc. IDrive Cloud Backup Client for Windows IDrive Cloud Backup Client for Windowsにおける権限昇格の脆弱性 - CVE-2026-1995 2026-05-1 15:13 2026-04-30 Show GitHub Exploit DB Packet Storm
1212 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月28日） - - 2026-05-1 14:31 2026-04-30 Show GitHub Exploit DB Packet Storm
1213 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7100 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
1214 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7102 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
1215 7.2 重要
Local 		click project click Pallets projectのClickにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-7246 2026-05-1 10:49 2026-04-30 Show GitHub Exploit DB Packet Storm
1216 7.8 重要
Local 		LizardSystems Terminal Services Manager LizardSystemsのTerminal Services Managerにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2018-25259 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
1217 5.5 警告
Local 		EZB Systems UltraISO EZB SystemsのUltraISOにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25267 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
1218 6.1 警告
Network 		IceWarp, Inc. icewarp IceWarp, Inc.のicewarpにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25269 2026-05-1 10:49 2026-04-22 Show GitHub Exploit DB Packet Storm
1219 8.1 重要
Network 		レッドハット openshift ai レッドハットのopenshift aiにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類 		CVE-2025-12805 2026-05-1 10:49 2026-03-26 Show GitHub Exploit DB Packet Storm
1220 7.1 重要
Local 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける複数の脆弱性 CWE-121
CWE-787
CWE-787
CVE-2026-0819 2026-05-1 10:49 2026-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312791 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount i… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-48896 2024-09-12 01:06 2024-08-21 Show GitHub Exploit DB Packet Storm
312792 5.3 MEDIUM
Network 		erjemin roll_cms A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as problematic. This affects an unknown part of the file roll_cms/roll_cms/views.p… CWE-209
Information Exposure Through an Error Message 		CVE-2024-8571 2024-09-12 01:05 2024-09-8 Show GitHub Exploit DB Packet Storm
312793 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following stack trace while performing a shutdown … CWE-476
 NULL Pointer Dereference 		CVE-2022-48895 2024-09-12 01:01 2024-08-21 Show GitHub Exploit DB Packet Storm
312794 6.1 MEDIUM
Network 		gouniverse golang_cms A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affects the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipu… CWE-79
Cross-site Scripting 		CVE-2024-8572 2024-09-12 00:59 2024-09-8 Show GitHub Exploit DB Packet Storm
312795 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Don't unregister on shutdown Similar to SMMUv2, this driver calls iommu_device_unregister() from the shutdown … CWE-476
 NULL Pointer Dereference 		CVE-2022-48894 2024-09-12 00:58 2024-08-21 Show GitHub Exploit DB Packet Storm
312796 6.1 MEDIUM
Network 		loway queuemetrics Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CWE-601
Open Redirect 		CVE-2024-42341 2024-09-12 00:57 2024-09-8 Show GitHub Exploit DB Packet Storm
312797 7.5 HIGH
Network 		loway queuemetrics Loway - CWE-204: Observable Response Discrepancy CWE-203
 Information Exposure Through Discrepancy 		CVE-2024-42343 2024-09-12 00:56 2024-09-8 Show GitHub Exploit DB Packet Storm
312798 4.3 MEDIUM
Network 		loway queuemetrics Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') CWE-444
HTTP Request Smuggling 		CVE-2024-42342 2024-09-12 00:56 2024-09-8 Show GitHub Exploit DB Packet Storm
312799 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, so… CWE-459
 Incomplete Cleanup 		CVE-2022-48893 2024-09-12 00:55 2024-08-21 Show GitHub Exploit DB Packet Storm
312800 6.5 MEDIUM
Network 		learningdigital orca_hcm Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files. CWE-22
Path Traversal 		CVE-2024-8585 2024-09-12 00:53 2024-09-9 Show GitHub Exploit DB Packet Storm