Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226401 7.5 危険 phpwebgallery - PhpWebGallery におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4702 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
226402 9.3 危険 VideoLAN - VideoLAN VLC Media Player の TY demux プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-4686 2012-12-20 18:52 2008-10-18 Show GitHub Exploit DB Packet Storm
226403 4.3 警告 Wireshark - Wireshark の packet-frame におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4684 2012-12-20 18:52 2008-05-16 Show GitHub Exploit DB Packet Storm
226404 5 警告 Wireshark - Wireshark の wtap.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4682 2012-12-20 18:52 2008-10-1 Show GitHub Exploit DB Packet Storm
226405 4.3 警告 Wireshark - Wireshark の Bluetooth RFCOMM 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2008-4681 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
226406 4.3 警告 Wireshark - Wireshark の USB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4680 2012-12-20 18:52 2008-10-1 Show GitHub Exploit DB Packet Storm
226407 4.3 警告 Vim - Vim 用の autoload/netrw.vim における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-4677 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
226408 7.5 危険 phpcounter - PHPcounter の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4675 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
226409 10 危険 webbiscuits - WebBiscuits Software Events Calendar の panel/common/theme/default/header_setup.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4673 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
226410 4.3 警告 WordPress.org - WPMU の wp-admin/wp-blogs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4671 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long time to mark ptes in the linear map as in… CWE-476
 NULL Pointer Dereference 		CVE-2026-31600 2026-04-30 05:14 2026-04-25 Show GitHub Exploit DB Packet Storm
812 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot reported a general protection fault in vidt… CWE-476
 NULL Pointer Dereference 		CVE-2026-31599 2026-04-30 05:12 2026-04-25 Show GitHub Exploit DB Packet Storm
813 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc… CWE-667
 Improper Locking 		CVE-2026-31598 2026-04-30 05:10 2026-04-25 Show GitHub Exploit DB Packet Storm
814 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already… CWE-415
 Double Free 		CVE-2026-31608 2026-04-30 05:03 2026-04-25 Show GitHub Exploit DB Packet Storm
815 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind again, cdev_init reinitialized the cdev… NVD-CWE-noinfo
CVE-2026-31606 2026-04-30 05:00 2026-04-25 Show GitHub Exploit DB Packet Storm
816 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide… CWE-369
 Divide By Zero 		CVE-2026-31605 2026-04-30 04:36 2026-04-25 Show GitHub Exploit DB Packet Storm
817 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while … CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-31604 2026-04-30 04:21 2026-04-25 Show GitHub Exploit DB Packet Storm
818 8.0 HIGH
Network 		microsoft power_apps Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. CWE-427
 Uncontrolled Search Path Element 		CVE-2026-32172 2026-04-30 04:11 2026-04-24 Show GitHub Exploit DB Packet Storm
819 10.0 CRITICAL
Network 		microsoft purview_ediscovery Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-26150 2026-04-30 04:10 2026-04-24 Show GitHub Exploit DB Packet Storm
820 9.8 CRITICAL
Network 		apache mina Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname allowlist and allowin… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-41635 2026-04-30 04:08 2026-04-27 Show GitHub Exploit DB Packet Storm