Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2051 8.1 重要
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-287
CWE-862
CVE-2026-23708 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
2052 8.8 重要
Network 		redis Redis Redis Ltd.のRedisにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-25243 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2053 7.8 重要
Local 		クアルコム X2000094 ファームウェア
XG101002 ファームウェア
Snapdragon AR1 Gen 1 ファームウェア
WSA8835 ファームウェア
XG101032 ファームウェア
WSA8830 ファームウェア
fastconnect 7800&nb… 		クアルコムのCologne ファームウェア等の複数製品における複数の脆弱性 CWE-749
CWE-787
CVE-2026-25266 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2054 9.8 緊急
Network 		クアルコム QCA7005 ファームウェア クアルコムのQCA7005 ファームウェアにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-25293 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2055 10 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 CWE-693
CWE-94
CVE-2026-26332 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
2056 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28474 2026-05-8 12:08 2026-03-5 Show GitHub Exploit DB Packet Storm
2057 9.8 緊急
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-28780 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2058 7.3 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-29168 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
2059 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox Focus Mozilla FoundationのMozilla Firefox Focusにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-2919 2026-05-8 12:08 2026-03-9 Show GitHub Exploit DB Packet Storm
2060 7.5 重要
Network 		OWASP ModSecurity OWASPのModSecurityにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-30923 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312891 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0. CWE-125
Out-of-bounds Read 		CVE-2024-46731 2024-09-26 22:29 2024-09-18 Show GitHub Exploit DB Packet Storm
312892 5.4 MEDIUM
Network 		puma puma Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing a underscore version of the … CWE-444
HTTP Request Smuggling 		CVE-2024-45614 2024-09-26 22:28 2024-09-20 Show GitHub Exploit DB Packet Storm
312893 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linear_pitch_alignment even for VM [Description] Assign linear_pitch_alignment so we don't cause a divide… CWE-369
 Divide By Zero 		CVE-2024-46732 2024-09-26 22:28 2024-09-18 Show GitHub Exploit DB Packet Storm
312894 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() mwifiex_get_priv_by_id() returns the priv pointer correspond… CWE-476
 NULL Pointer Dereference 		CVE-2024-46755 2024-09-26 22:25 2024-09-18 Show GitHub Exploit DB Packet Storm
312895 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a mutex The main threat to data consistency in ice_xdp() is a possible asynchronous PF reset.… CWE-476
 NULL Pointer Dereference 		CVE-2024-46765 2024-09-26 22:24 2024-09-18 Show GitHub Exploit DB Packet Storm
312896 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disable() gets called during rxq and txq clean… CWE-908
 Use of Uninitialized Resource 		CVE-2024-46784 2024-09-26 22:21 2024-09-18 Show GitHub Exploit DB Packet Storm
312897 - - - Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived chan… - CVE-2024-47145 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
312898 - - - Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a pe… - CVE-2024-47003 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
312899 - - - Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deploy… - CVE-2024-45843 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
312900 - - - User interface (UI) misrepresentation of critical information issue exists in multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION. If this vulnerabi… - CVE-2024-47045 2024-09-26 13:15 2024-09-26 Show GitHub Exploit DB Packet Storm