Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2231 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2025-40536 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2232 7.5 重要
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2025-40537 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2233 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40551 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2234 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40552 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2235 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40553 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2236 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40554 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2237 5.5 警告
Local 		Pure Storage, Inc. Portworx Pure Storage, Inc.のPortworxにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2025-9127 2026-02-5 15:51 2025-12-4 Show GitHub Exploit DB Packet Storm
2238 6.5 警告
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2020-36968 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2239 8.8 重要
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-36969 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2240 9.8 緊急
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2023-54339 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 10.0 CRITICAL
Network 		- - In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal att… New CWE-22
Path Traversal 		CVE-2026-7411 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
32 4.3 MEDIUM
Network 		- - An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. `django.middleware.cache.UpdateCacheMiddleware` erroneously caches requests where the `Vary` header contained an asterisk (`'*'`). T… New CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2026-6907 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
33 5.3 MEDIUM
Network 		- - An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZE` limit, potentially … New CWE-130
 Improper Handling of Length Parameter Inconsistency 		CVE-2026-5766 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
34 - - - In the Linux kernel, the following vulnerability has been resolved: x86-64: rename misleadingly named '__copy_user_nocache()' function This function was a masterclass in bad naming, for various his… New - CVE-2026-43073 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
35 - - - In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative value if an error happens, so … New - CVE-2026-43072 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
36 - - - In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two There is an OOB read problem on dentry_hashtable when user sets 'dhash_entries=… New - CVE-2026-43071 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
37 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register ID for BPF_END value tracking When a register undergoes a BPF_END (byte swap) operation, its scalar value is … New - CVE-2026-43070 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
38 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ll: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hci_ll.c:587 download_firmware() warn: 'fw'… New - CVE-2026-43069 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
39 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() There's issue as follows: ... EXT4-fs (mmcblk0p1): Dela… New - CVE-2026-43068 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
40 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Commit 4865c768b563 ("ext4: always allocate blocks o… New - CVE-2026-43067 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm