Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1251	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23415	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

1252	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23416	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

1253	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23417	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

1254	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23418	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

1255	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-23419	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

1256	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-23420	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

1257	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23421	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

1258	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-23422	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

1259	5.7	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 仮想化ベースセキュリティ (VBS) のセキュリティ機能バイパスの脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-23670	2026-04-27 10:52	2026-04-14	Show	GitHub Exploit DB Packet Storm

1260	7	重要 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025 Microsoft Windows 11 24h2 Microsoft Wind…	AppLocker フィルタードライバー (applockerfltr.sys) の特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-25184	2026-04-27 10:52	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
411	4.3	MEDIUM Network	-	-	A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-36757	2026-05-1 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

412	5.4	MEDIUM Network	-	-	A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-36756	2026-05-1 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

413	8.1	HIGH Network	-	-	An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function New	CWE-94 Code Injection	CVE-2026-36340	2026-05-1 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

414	7.5	HIGH Network	-	-	A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This… New	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-33845	2026-05-1 03:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

415	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. Attackers can exploit this by decla… New	CWE-863 Incorrect Authorization	CVE-2026-41404	2026-05-1 02:41	2026-04-29	Show	GitHub Exploit DB Packet Storm

416	4.0	MEDIUM Local	openclaw	openclaw	OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attackers can bypass acce… New	CWE-807 Reliance on Untrusted Inputs in a Security Decision	CVE-2026-41403	2026-05-1 02:40	2026-04-29	Show	GitHub Exploit DB Packet Storm

417	5.4	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sibling targets using the same mess… New	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2026-41402	2026-05-1 02:27	2026-04-29	Show	GitHub Exploit DB Packet Storm

418	7.5	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-s… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-41400	2026-05-1 02:27	2026-04-29	Show	GitHub Exploit DB Packet Storm

419	-		-	-	Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Serialized Data External Linking.This issue affects Connext Professional: from 7.4.… New	CWE-611 XXE	CVE-2025-14543	2026-05-1 02:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

420	9.8	CRITICAL Network	-	-	Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from… New	CWE-305 Authentication Bypass by Primary Weakness	CVE-2026-4670	2026-05-1 02:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed