Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2161 10 緊急
Network 		dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2162 8.2 重要
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2163 6.5 警告
Network 		external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2164 8.1 重要
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2165 9.1 緊急
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
2166 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2167 7.2 重要
Network 		Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2168 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける複数の脆弱性 CWE-1289
CWE-345
CWE-706
CVE-2026-35039 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2169 5.3 警告
Network 		WWBN AVideo WWBNのAVideoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35179 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2170 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35196 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 4.3 MEDIUM
Network 		open5gs open5gs A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes denial of service. … Update CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7586 2026-05-7 10:47 2026-05-2 Show GitHub Exploit DB Packet Storm
442 4.3 MEDIUM
Network 		open5gs open5gs A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. T… Update CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7587 2026-05-7 10:47 2026-05-2 Show GitHub Exploit DB Packet Storm
443 7.3 HIGH
Network 		libssh2 libssh2 A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/p… Update CWE-189
CWE-190
Numeric Errors
 Integer Overflow or Wraparound 		CVE-2026-7598 2026-05-7 10:47 2026-05-2 Show GitHub Exploit DB Packet Storm
444 6.3 MEDIUM
Network 		wavlink wl-wn570ha1_firmware A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the argument command lea… Update CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7691 2026-05-7 10:46 2026-05-3 Show GitHub Exploit DB Packet Storm
445 6.3 MEDIUM
Network 		wavlink wl-wn570ha1_firmware A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS re… Update CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7692 2026-05-7 10:46 2026-05-3 Show GitHub Exploit DB Packet Storm
446 9.8 CRITICAL
Network 		wavlink wl-wn570ha1_firmware A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes … Update CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7690 2026-05-7 10:42 2026-05-3 Show GitHub Exploit DB Packet Storm
447 8.8 HIGH
Network 		google chrome Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7896 2026-05-7 08:43 2026-05-7 Show GitHub Exploit DB Packet Storm
448 7.5 HIGH
Network 		google chrome Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML p… New CWE-416
 Use After Free 		CVE-2026-7897 2026-05-7 08:43 2026-05-7 Show GitHub Exploit DB Packet Storm
449 8.8 HIGH
Network 		google chrome Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-7898 2026-05-7 08:43 2026-05-7 Show GitHub Exploit DB Packet Storm
450 8.8 HIGH
Network 		google chrome Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-7899 2026-05-7 08:42 2026-05-7 Show GitHub Exploit DB Packet Storm