Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1781 8.2 重要
Network
GNOME Project
レッドハット
libsoup
Red Hat Enterprise Linux
GNOME Project等の複数ベンダの製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス
CVE-2026-2436 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
1782 5.4 警告
Network
OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-24906 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
1783 5.4 警告
Network
OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-24907 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
1784 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおけるリクエストの直接送信に関する脆弱性 CWE-425
リクエストの直接送信
CVE-2026-25679 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1785 9.8 緊急
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-25917 2026-04-23 10:14 2026-04-18 Show GitHub Exploit DB Packet Storm
1786 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-27137 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1787 5.9 警告
Network
The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-27138 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1788 2.5
Local
The Go Project Go The Go ProjectのGoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-27139 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1789 6.1 警告
Network
The Go Project Go The Go ProjectのGoにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-27142 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
1790 5.8 警告
Network
OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-28476 2026-04-23 10:14 2026-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 4.3 MEDIUM
Network
- - A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the compon… New CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference
CVE-2026-7701 2026-05-4 01:15 2026-05-4 Show GitHub Exploit DB Packet Storm
462 6.3 MEDIUM
Network
- - A weakness has been identified in langflow-ai langflow up to 1.8.4. This affects the function eval of the file src/lfx/src/lfx/components/llm_operations/lambda_filter.p of the component LambdaFilterC… New CWE-74
CWE-94
Injection
Code Injection
CVE-2026-7700 2026-05-4 00:15 2026-05-4 Show GitHub Exploit DB Packet Storm
463 6.3 MEDIUM
Network
- - A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argum… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7699 2026-05-4 00:15 2026-05-4 Show GitHub Exploit DB Packet Storm
464 7.3 HIGH
Network
- - A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo.… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7698 2026-05-3 23:16 2026-05-3 Show GitHub Exploit DB Packet Storm
465 4.7 MEDIUM
Network
- - A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file /manager/card/cardhand_submit.php. This manipulation of the argument ID causes… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7697 2026-05-3 23:16 2026-05-3 Show GitHub Exploit DB Packet Storm
466 6.3 MEDIUM
Network
- - A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/main/uploadH5Files. T… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-7696 2026-05-3 22:16 2026-05-3 Show GitHub Exploit DB Packet Storm
467 7.3 HIGH
Network
- - A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unknown function of the file /SubstationWEBV2/main/elecMaxMinA… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7695 2026-05-3 22:16 2026-05-3 Show GitHub Exploit DB Packet Storm
468 7.3 HIGH
Network
- - A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMi… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7694 2026-05-3 21:15 2026-05-3 Show GitHub Exploit DB Packet Storm
469 6.3 MEDIUM
Network
- - A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS re… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7692 2026-05-3 20:16 2026-05-3 Show GitHub Exploit DB Packet Storm
470 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the argument command lea… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7691 2026-05-3 20:16 2026-05-3 Show GitHub Exploit DB Packet Storm