Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1621 5.3 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-5772 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
1622 6.5 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-5778 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
1623 9.6 緊急
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-5845 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
1624 8.9 重要
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-5921 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
1625 7.8 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-6384 2026-04-30 10:57 2026-04-15 Show GitHub Exploit DB Packet Storm
1626 7.8 重要
Local 		Rapid7 Insight Agent Rapid7のInsight Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-6482 2026-04-30 10:57 2026-04-17 Show GitHub Exploit DB Packet Storm
1627 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6785 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
1628 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6786 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
1629 7.8 重要
Local 		IObit Malware Fighter IObitのMalware Fighterにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2016-20059 2026-04-28 10:14 2026-04-4 Show GitHub Exploit DB Packet Storm
1630 6.3 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62233 2026-04-28 10:14 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 5.3 MEDIUM
Network 		- - ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an att… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-42241 2026-05-8 05:37 2026-05-8 Show GitHub Exploit DB Packet Storm
872 - - - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid o… CWE-295
Improper Certificate Validation  		CVE-2026-42225 2026-05-8 05:36 2026-05-8 Show GitHub Exploit DB Packet Storm
873 8.1 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.… CWE-1004
 Sensitive Cookie Without 'HttpOnly' Flag 		CVE-2026-42239 2026-05-8 05:35 2026-05-8 Show GitHub Exploit DB Packet Storm
874 7.6 HIGH
Network 		- - manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. F… CWE-266
 Incorrect Privilege Assignment 		CVE-2026-43510 2026-05-8 05:32 2026-05-8 Show GitHub Exploit DB Packet Storm
875 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbot reported use-after-free of AF_UNIX soc… CWE-416
 Use After Free 		CVE-2026-43016 2026-05-8 05:31 2026-05-2 Show GitHub Exploit DB Packet Storm
876 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the registered clks dur… CWE-416
 Use After Free 		CVE-2026-43015 2026-05-8 05:31 2026-05-2 Show GitHub Exploit DB Packet Storm
877 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_register_fixed_rate() need to be rel… NVD-CWE-noinfo
CVE-2026-43014 2026-05-8 05:29 2026-05-2 Show GitHub Exploit DB Packet Storm
878 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error o… CWE-476
 NULL Pointer Dereference 		CVE-2026-43013 2026-05-8 05:28 2026-05-2 Show GitHub Exploit DB Packet Storm
879 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode fails, we rollback to legacy … NVD-CWE-noinfo
CVE-2026-43012 2026-05-8 05:28 2026-05-2 Show GitHub Exploit DB Packet Storm
880 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and retur… CWE-415
 Double Free 		CVE-2026-43011 2026-05-8 05:26 2026-05-2 Show GitHub Exploit DB Packet Storm