Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2121 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41138 2026-04-27 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
2122 7 重要
Network 		openremote openremote openremoteにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41166 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
2123 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過度な反復の脆弱性 CWE-834
過度なイテレーション 		CVE-2026-41168 2026-04-27 10:46 2026-04-22 Show GitHub Exploit DB Packet Storm
2124 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41264 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2125 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-41265 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2126 7.5 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-200
CWE-522
CWE-862
CVE-2026-41266 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2127 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-639
CWE-915
CVE-2026-41267 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2128 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41268 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2129 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-41269 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
2130 8.3 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-918
CVE-2026-41270 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 - - - In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main controlling structure fo… New - CVE-2026-43340 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
422 - - - In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_addr() The mentioned helper try to warn the user about an exceptional condition,… New - CVE-2026-43339 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
423 - - - In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve any space, they just do a tra… New - CVE-2026-43338 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
424 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assumes that update_bw_bounding_box() is valid… New - CVE-2026-43337 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
425 - - - In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state before it leaves scope Since the ChaCha permutation is invertible, the local variable … New - CVE-2026-43336 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
426 - - - In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() The change to dynamic IDs for SM8450 platform interc… New - CVE-2026-43335 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
427 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements before building the pairing response smp_cmd_pairing_req() currently builds the… New - CVE-2026-43334 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
428 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_TO_BUF via base_type() which strips PTR_… New - CVE-2026-43333 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
429 - - - In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermal_zone_device_register_with_trips() fails after registeri… New - CVE-2026-43332 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm
430 - - - In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Disable KCOV instrumentation after load_segments() The load_segments() function changes segment registers, invalidatin… New - CVE-2026-43331 2026-05-8 23:16 2026-05-8 Show GitHub Exploit DB Packet Storm