Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1381	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31474	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1382	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31475	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1383	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31476	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1384	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31477	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1385	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31478	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1386	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31479	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1387	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31480	2026-04-30 12:10	2026-04-22	Show	GitHub Exploit DB Packet Storm

1388	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31547	2026-04-30 12:10	2026-04-24	Show	GitHub Exploit DB Packet Storm

1389	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31548	2026-04-30 12:10	2026-04-24	Show	GitHub Exploit DB Packet Storm

1390	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31549	2026-04-30 12:10	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
911	8.1	HIGH Network	-	-	In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL commands via a crafted… New	CWE-89 SQL Injection	CVE-2026-44331	2026-05-8 00:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

912	-		-	-	lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network … New	CWE-863 Incorrect Authorization	CVE-2026-39402	2026-05-8 00:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

913	3.4	LOW Adjacent	-	-	In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. New	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2026-44405	2026-05-8 00:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

914	-		-	-	A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint (`GET /di… New	CWE-89 SQL Injection	CVE-2026-29080	2026-05-8 00:53	2026-05-7	Show	GitHub Exploit DB Packet Storm

915	8.8	HIGH Adjacent	-	-	gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopl… New	CWE-1327 Binding to an Unrestricted IP Address	CVE-2026-42503	2026-05-8 00:53	2026-05-7	Show	GitHub Exploit DB Packet Storm

916	-		-	-	### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`. This allows any authenticate… New	CWE-89 SQL Injection	CVE-2026-29090	2026-05-8 00:53	2026-05-7	Show	GitHub Exploit DB Packet Storm

917	-		-	-	monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any authenticated user… New	CWE-209 CWE-770 CWE-918 Information Exposure Through an Error Message Allocation of Resources Without Limits or Throttling Server-Side Request Forgery (SSRF)	CVE-2026-41644	2026-05-8 00:53	2026-05-7	Show	GitHub Exploit DB Packet Storm

918	8.7	HIGH Network	-	-	RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() function and exam.py's gen_ticket_code() functi… New	CWE-330 CWE-338 Use of Insufficiently Random Values Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-41505	2026-05-8 00:53	2026-05-8	Show	GitHub Exploit DB Packet Storm

919	5.4	MEDIUM Network	-	-	Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function New	CWE-79 Cross-site Scripting	CVE-2026-36358	2026-05-8 00:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

920	6.5	MEDIUM Network	-	-	Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, the default key generator in the cache middleware uses only the request path and does not include the query str… Update	CWE-436 Interpretation Conflict	CVE-2026-30246	2026-05-8 00:52	2026-05-5	Show	GitHub Exploit DB Packet Storm