Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1761 5.9 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-5376 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1762 6.8 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5378 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1763 3
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5379 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1764 5.3 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5380 2026-04-23 10:15 2026-04-7 Show GitHub Exploit DB Packet Storm
1765 2.2
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5381 2026-04-23 10:15 2026-04-7 Show GitHub Exploit DB Packet Storm
1766 3
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5382 2026-04-23 10:15 2026-04-7 Show GitHub Exploit DB Packet Storm
1767 4.4 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5383 2026-04-23 10:15 2026-04-7 Show GitHub Exploit DB Packet Storm
1768 5.8 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5384 2026-04-23 10:15 2026-04-7 Show GitHub Exploit DB Packet Storm
1769 7.8 重要
Local
Microvirt Memu MicrovirtのMemuにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2019-25568 2026-04-23 10:15 2026-03-21 Show GitHub Exploit DB Packet Storm
1770 4.1 警告
Local
- デルのemc powerscale onefs における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2025-43883 2026-04-23 10:15 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… Update - CVE-2026-31693 2026-05-3 16:16 2026-04-30 Show GitHub Exploit DB Packet Storm
302 6.5 MEDIUM
Network
- - A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the comp… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7681 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
303 4.3 MEDIUM
Network
- - A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipu… New CWE-22
Path Traversal
CVE-2026-7680 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
304 7.2 HIGH
Network
- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function in versions up to,… New CWE-79
Cross-site Scripting
CVE-2026-5063 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
305 7.3 HIGH
Network
- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… New CWE-287
Improper Authentication
CVE-2026-7679 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
306 6.3 MEDIUM
Network
- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7678 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
307 3.5 LOW
Network
- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7677 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
308 4.3 MEDIUM
Network
- - A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/control… New CWE-22
Path Traversal
CVE-2026-7676 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
309 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6481 2026-05-3 08:16 2026-05-3 Show GitHub Exploit DB Packet Storm
310 7.3 HIGH
Network
- - A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulatio… New CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read
CVE-2026-7668 2026-05-3 06:16 2026-05-3 Show GitHub Exploit DB Packet Storm