Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2191 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-31746 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2192 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-31747 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2193 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-31748 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2194 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31749 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2195 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-31750 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2196 4.7 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-31751 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2197 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31752 2026-05-11 10:59 2026-05-1 Show GitHub Exploit DB Packet Storm
2198 8.8 重要
Network 		Koha Koha KohaにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-31844 2026-05-11 10:59 2026-03-11 Show GitHub Exploit DB Packet Storm
2199 7.8 重要
Local 		マイクロソフト SQL Server 2019
SQL Server 2025
SQL Server 2016
SQL Server 2022
SQL Server 2017 		SQL サーバーの特権の昇格の脆弱性 CWE-89
SQLインジェクション 		CVE-2026-32167 2026-05-11 10:59 2026-04-14 Show GitHub Exploit DB Packet Storm
2200 7.8 重要
Local 		マイクロソフト SQL Server 2019
SQL Server 2025
SQL Server 2016
SQL Server 2022
SQL Server 2017 		SQL サーバーの特権の昇格の脆弱性 CWE-89
SQLインジェクション 		CVE-2026-32176 2026-05-11 10:58 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312241 - - - Deserialization of Untrusted Data vulnerability in TAKETIN TAKETIN To WP Membership allows Object Injection.This issue affects TAKETIN To WP Membership: from n/a through 2.8.0. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49226 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312242 - - - Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently allows Object Injection.This issue affects Recently: from n/a through 1.1. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49218 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312243 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Clayton Feed Comments Number allows Upload a Web Shell to a Web Server.This issue affects Feed Comments Number: from n/a throug… - CVE-2024-49216 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312244 - - - Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim - CVE-2024-22034 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312245 - - - The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps CWE-78
OS Command  		CVE-2024-22033 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312246 - - - A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written … CWE-200
Information Exposure 		CVE-2024-22032 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312247 - - - A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a man-in-the-middle (MITM) attack. An attacker would need to have control of an expired doma… CWE-295
Improper Certificate Validation  		CVE-2024-22030 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312248 - - - Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2024-22029 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312249 - - - : Authentication Bypass Using an Alternate Path or Channel vulnerability in sooskriszta, webforza BuddyPress Better Registration allows : Authentication Bypass.This issue affects BuddyPress Better Re… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-49247 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm
312250 - - - A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalat… CWE-269
 Improper Privilege Management 		CVE-2023-32196 2024-10-17 01:38 2024-10-16 Show GitHub Exploit DB Packet Storm