Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1761	5.9	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-5376	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1762	6.8	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5378	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1763	3	低 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5379	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1764	5.3	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5380	2026-04-23 10:15	2026-04-7	Show	GitHub Exploit DB Packet Storm

1765	2.2	低 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5381	2026-04-23 10:15	2026-04-7	Show	GitHub Exploit DB Packet Storm

1766	3	低 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5382	2026-04-23 10:15	2026-04-7	Show	GitHub Exploit DB Packet Storm

1767	4.4	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5383	2026-04-23 10:15	2026-04-7	Show	GitHub Exploit DB Packet Storm

1768	5.8	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5384	2026-04-23 10:15	2026-04-7	Show	GitHub Exploit DB Packet Storm

1769	7.8	重要 Local	Microvirt	Memu	MicrovirtのMemuにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2019-25568	2026-04-23 10:15	2026-03-21	Show	GitHub Exploit DB Packet Storm

1770	4.1	警告 Local		-	デルのemc powerscale onefs　における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-43883	2026-04-23 10:15	2026-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
81	6.3	MEDIUM Network	-	-	A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this vulnerability is the function _format_plugins of the file .claude/skills/ui-styling/scripts/tailwind_config… New	CWE-74 CWE-94 Injection Code Injection	CVE-2026-7595	2026-05-2 06:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

82	7.3	HIGH Network	-	-	A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. The manipulation of the argument … New	CWE-22 Path Traversal	CVE-2026-7594	2026-05-2 06:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

83	7.3	HIGH Network	-	-	A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the function execute_command of the file src/index.ts of the component MCP Interfac… New	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-7593	2026-05-2 06:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

84	8.4	HIGH Local	-	-	flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function. New	CWE-121 Stack-based Buffer Overflow	CVE-2026-30363	2026-05-2 06:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

85	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67968. Reason: This candidate is a reservation duplicate of CVE-2025-67968. Notes: All CVE users should reference … New	-	CVE-2025-12993	2026-05-2 06:16	2026-05-2	Show	GitHub Exploit DB Packet Storm

86	5.6	MEDIUM Network	vllm	vllm	A vulnerability was found in vllm up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface.py of the component KV Block Handler. Performing a manipul… Update	CWE-908 Use of Uninitialized Resource	CVE-2026-7141	2026-05-2 05:30	2026-04-28	Show	GitHub Exploit DB Packet Storm

87	7.3	HIGH Network	shadowclonelabs	glutamate_mcp_servers	A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78. Affected by this issue is some unknown functionality of the file src/puppeteer/in… Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-7094	2026-05-2 05:30	2026-04-27	Show	GitHub Exploit DB Packet Storm

88	8.8	HIGH Network	coze	coze_studio	A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/database_impl.go of the… Update	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-7023	2026-05-2 05:27	2026-04-26	Show	GitHub Exploit DB Packet Storm

89	5.6	MEDIUM Network	ollama	ollama	A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The mani… Update	CWE-22 Path Traversal	CVE-2026-7020	2026-05-2 05:24	2026-04-26	Show	GitHub Exploit DB Packet Storm

90	9.8	CRITICAL Network	sipeed	picoclaw	A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation result… Update	CWE-74 CWE-77 Injection Command Injection	CVE-2026-6987	2026-05-2 05:24	2026-04-26	Show	GitHub Exploit DB Packet Storm