Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1531	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40916	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

1532	7.1	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40917	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

1533	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性	CWE-131 正しくないバッファサイズ計算	CVE-2026-40918	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

1534	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40919	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

1535	5.9	警告 Network	opentelemetry	opentelemetry	opentelemetryにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41078	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

1536	6.5	警告 Network	Apache Software Foundation	Apache Storm	Apache Software FoundationのApache Stormにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-41081	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

1537	7.5	重要 Network	SQLAlchemy	mako	SQLAlchemyのmakoにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41205	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

1538	7.8	重要 Local	Tommaso Bona (ParzivalHack)	PySpector	Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41206	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

1539	6.1	警告 Network	cure53	DOMPurify	cure53のDOMPurifyにおける複数の脆弱性	CWE-183 CWE-79	CVE-2026-41240	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

1540	5.4	警告 Network	pretalx	pretalx	pretalxにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41241	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
821	7.0	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable() A race condition exists between lec_atm_close() setting priv->lecd to NULL an… Update	CWE-416 Use After Free	CVE-2026-43050	2026-05-8 03:21	2026-05-2	Show	GitHub Exploit DB Packet Storm

822	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the stati… Update	NVD-CWE-noinfo	CVE-2026-43052	2026-05-8 03:19	2026-05-2	Show	GitHub Exploit DB Packet Storm

823	8.1	HIGH Adjacent	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports with… Update	CWE-125 Out-of-bounds Read	CVE-2026-43051	2026-05-8 03:00	2026-05-2	Show	GitHub Exploit DB Packet Storm

824	9.8	CRITICAL Network	paloaltonetworks	pan-os	A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code w… New	CWE-787 Out-of-bounds Write	CVE-2026-0300	2026-05-8 02:46	2026-05-7	Show	GitHub Exploit DB Packet Storm

825	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit after resize When enter_alt_screen() saves vc_uni_lines into vc_saved_uni_lin… Update	CWE-125 Out-of-bounds Read	CVE-2026-31742	2026-05-8 02:42	2026-05-2	Show	GitHub Exploit DB Packet Storm

826	9.1	CRITICAL Network	torproject	tor	Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011. New	CWE-684 Incorrect Provision of Specified Functionality	CVE-2026-44597	2026-05-8 02:34	2026-05-7	Show	GitHub Exploit DB Packet Storm

827	5.3	MEDIUM Network	torproject	tor	Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. New	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44599	2026-05-8 02:31	2026-05-7	Show	GitHub Exploit DB Packet Storm

828	5.3	MEDIUM Network	torproject	tor	Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010. New	CWE-696 Incorrect Behavior Order	CVE-2026-44600	2026-05-8 02:26	2026-05-7	Show	GitHub Exploit DB Packet Storm

829	9.1	CRITICAL Network	torproject	tor	Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007. New	CWE-193 Off-by-one Error	CVE-2026-44603	2026-05-8 02:24	2026-05-7	Show	GitHub Exploit DB Packet Storm

830	8.8	HIGH Local	-	-	NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container … Update	CWE-22 Path Traversal	CVE-2026-7875	2026-05-8 02:15	2026-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed