Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2331 4.7 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35354 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2332 4.7 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35357 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2333 4.7 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける複数の脆弱性 CWE-367
CWE-59
CVE-2026-35359 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2334 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35360 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2335 5.6 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35363 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2336 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35364 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2337 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-35367 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2338 7.8 重要
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-35368 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2339 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-35377 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2340 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-35381 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
591 9.8 CRITICAL
Network 		- - NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object. Update CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2025-63704 2026-05-9 07:16 2026-05-8 Show GitHub Exploit DB Packet Storm
592 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In that case, the all… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43225 2026-05-9 06:22 2026-05-6 Show GitHub Exploit DB Packet Storm
593 8.1 HIGH
Network 		- - MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing Authent… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-44400 2026-05-9 06:16 2026-05-9 Show GitHub Exploit DB Packet Storm
594 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super … Update CWE-617
 Reachable Assertion 		CVE-2026-43228 2026-05-9 06:16 2026-05-6 Show GitHub Exploit DB Packet Storm
595 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfully but fails to su… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43223 2026-05-9 06:14 2026-05-6 Show GitHub Exploit DB Packet Storm
596 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_area_dma() fails, which could only happe… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43224 2026-05-9 06:13 2026-05-6 Show GitHub Exploit DB Packet Storm
597 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as both a clocksource and a clocke… Update NVD-CWE-noinfo
CVE-2026-43227 2026-05-9 06:11 2026-05-6 Show GitHub Exploit DB Packet Storm
598 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe(). The v4l2 control handler is initialized… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43231 2026-05-9 06:09 2026-05-6 Show GitHub Exploit DB Packet Storm
599 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unregistration to the beginning of … Update NVD-CWE-noinfo
CVE-2026-43229 2026-05-9 06:08 2026-05-6 Show GitHub Exploit DB Packet Storm
600 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bss_conf->beacon_i… Update CWE-369
 Divide By Zero 		CVE-2026-43267 2026-05-9 06:03 2026-05-6 Show GitHub Exploit DB Packet Storm