Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227291 5 警告 the everything development company - The Everything Development System の The Everything Development Engine におけるユーザアカウントへアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-0724 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227292 4.3 警告 planetluc - MyNews の mynews.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0723 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227293 4.3 警告 Webmin Project - Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0720 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227294 6.8 警告 シマンテック - Symantec Altiris Notification Server のエージェントにおける権限を取得される脆弱性 CWE-DesignError
CVE-2008-0716 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227295 5 警告 sflog - sflog! におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0703 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227296 9.3 危険 south river technologies - Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0702 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227297 7.8 危険 print manager plus - Print Manager Plus 2008 Client Billing and Authentication におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0693 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227298 4.3 警告 simon elvery
WordPress.org
- WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0691 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227299 4.3 警告 smartscript - Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0688 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227300 7.5 危険 youtube - Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0687 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1171 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations pmbus_regulator_get_voltage(), pmbus_regulat… CWE-667
 Improper Locking
CVE-2026-31486 2026-04-28 22:06 2026-04-22 Show GitHub Exploit DB Packet Storm
1172 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is c… CWE-667
 Improper Locking
CVE-2026-31487 2026-04-28 22:05 2026-04-22 Show GitHub Exploit DB Packet Storm
1173 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add ds… CWE-416
 Use After Free
CVE-2026-31488 2026-04-28 21:58 2026-04-22 Show GitHub Exploit DB Packet Storm
1174 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(),… CWE-415
 Double Free
CVE-2026-31489 2026-04-28 21:57 2026-04-22 Show GitHub Exploit DB Packet Storm
1175 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the da… CWE-416
 Use After Free
CVE-2026-31490 2026-04-28 21:52 2026-04-22 Show GitHub Exploit DB Packet Storm
1176 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cau… CWE-190
 Integer Overflow or Wraparound
CVE-2026-31491 2026-04-28 21:51 2026-04-22 Show GitHub Exploit DB Packet Storm
1177 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_to_udata fails, it will call irdma_destr… CWE-908
 Use of Uninitialized Resource
CVE-2026-31492 2026-04-28 21:46 2026-04-22 Show GitHub Exploit DB Packet Storm
1178 9.6 CRITICAL
Network
microsoft partner_center Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. CWE-284
Improper Access Control
CVE-2026-24303 2026-04-28 21:11 2026-04-24 Show GitHub Exploit DB Packet Storm
1179 10.0 CRITICAL
Network
microsoft entra_id Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-35431 2026-04-28 21:10 2026-04-24 Show GitHub Exploit DB Packet Storm
1180 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registration can fail before the trigger-data c… CWE-476
 NULL Pointer Dereference
CVE-2026-31481 2026-04-28 20:38 2026-04-22 Show GitHub Exploit DB Packet Storm