Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1631	5.9	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-22737	2026-04-24 11:33	2026-03-20	Show	GitHub Exploit DB Packet Storm

1632	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-23774	2026-04-24 11:33	2026-04-20	Show	GitHub Exploit DB Packet Storm

1633	8.7	重要 Network	decidim	decidim	Decidim Free Software AssociationのDecidimにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-23891	2026-04-24 11:33	2026-04-13	Show	GitHub Exploit DB Packet Storm

1634	4.9	警告 Network	OctoberCMS	October	OctoberCMSのOctoberにおける複数の脆弱性	CWE-200 CWE-94	CVE-2026-25125	2026-04-24 11:33	2026-04-14	Show	GitHub Exploit DB Packet Storm

1635	6.7	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-25691	2026-04-24 11:33	2026-04-14	Show	GitHub Exploit DB Packet Storm

1636	6.1	警告 Local	Zulip	Zulip	Zulipにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-26058	2026-04-24 11:33	2026-04-3	Show	GitHub Exploit DB Packet Storm

1637	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-26944	2026-04-24 11:33	2026-04-20	Show	GitHub Exploit DB Packet Storm

1638	6.1	警告 Network	Jeremiah Lowin	FastMCP	Jeremiah LowinのFastMCPにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-27124	2026-04-24 11:33	2026-04-3	Show	GitHub Exploit DB Packet Storm

1639	2.7	低 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-27316	2026-04-24 11:33	2026-04-14	Show	GitHub Exploit DB Packet Storm

1640	6.3	警告 Network	OpenPrinting	CUPS	OpenPrintingのCUPSにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-27447	2026-04-24 11:32	2026-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
81	7.5	HIGH Network	wireshark	wireshark	iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-415 Double Free	CVE-2026-5657	2026-05-2 01:45	2026-04-30	Show	GitHub Exploit DB Packet Storm

82	7.5	HIGH Network	wireshark	wireshark	MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-6519	2026-05-2 01:41	2026-04-30	Show	GitHub Exploit DB Packet Storm

83	7.5	HIGH Network	wireshark	wireshark	OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-6520	2026-05-2 01:37	2026-04-30	Show	GitHub Exploit DB Packet Storm

84	4.3	MEDIUM Network	-	-	A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes denial of service. … New	CWE-404 Improper Resource Shutdown or Release	CVE-2026-7586	2026-05-2 01:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

85	4.3	MEDIUM Network	-	-	A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manip… New	CWE-404 Improper Resource Shutdown or Release	CVE-2026-7585	2026-05-2 01:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

86	7.5	HIGH Network	-	-	Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, lead… Update	CWE-122 CWE-176 Heap-based Buffer Overflow Improper Handling of Unicode Encoding	CVE-2026-7040	2026-05-2 01:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

87	8.8	HIGH Network	-	-	TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution New	CWE-122 Heap-based Buffer Overflow	CVE-2026-5402	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

88	8.1	HIGH Network	freebsd	freebsd	As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when reque… New	CWE-122 Heap-based Buffer Overflow	CVE-2026-42512	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

89	8.1	HIGH Network	freebsd	freebsd	The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by … New	CWE-149 Improper Neutralization of Quoting Syntax	CVE-2026-42511	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

90	-		-	-	Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues include an out-of-bound… New	-	CVE-2026-42481	2026-05-2 01:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed