Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1781 8.2 重要
Network 		GNOME Project
レッドハット		 libsoup
Red Hat Enterprise Linux 		GNOME Project等の複数ベンダの製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス 		CVE-2026-2436 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
1782 5.4 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24906 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
1783 5.4 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24907 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
1784 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるリクエストの直接送信に関する脆弱性 CWE-425
リクエストの直接送信 		CVE-2026-25679 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1785 9.8 緊急
Network 		Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-25917 2026-04-23 10:14 2026-04-18 Show GitHub Exploit DB Packet Storm
1786 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-27137 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1787 5.9 警告
Network 		The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-27138 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1788 2.5 低
Local 		The Go Project Go The Go ProjectのGoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-27139 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1789 6.1 警告
Network 		The Go Project Go The Go ProjectのGoにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-27142 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1790 5.8 警告
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-28476 2026-04-23 10:14 2026-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected message size for each response type… Update - CVE-2026-31707 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
292 8.8 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on-disk num_aces value from the … Update - CVE-2026-31706 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
293 9.8 CRITICAL
Network 		- - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment padding via memset() after wr… Update - CVE-2026-31705 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
294 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wbs_work_fn() inode_switch_wbs_work_fn() has a loop like: wb_get(new_wb); whil… Update - CVE-2026-31703 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
295 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(), when PACKET_VNET_HDR is enabled, vnet_hdr point… Update - CVE-2026-31700 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
296 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK CSR, don't attempt to copy the … Update - CVE-2026-31699 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
297 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, don't attempt to cop… Update - CVE-2026-31698 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
298 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for the CPU, don't attempt to cop… Update - CVE-2026-31697 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
299 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv->lowerdev->dev)` f… Update - CVE-2026-31695 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
300 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-control… Update - CVE-2026-31694 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm