Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2341	8.1	重要 Network	WWBN	AVideo	WWBNのAVideoにおける過度に許容されるクロスドメインホワイトリストに関する脆弱性	CWE-942 過度に許容されるクロスドメインホワイトリスト	CVE-2026-41056	2026-04-27 11:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

2342	7.5	重要 Network	libexpat project	libexpat	libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性	CWE-331 エントロピー不足	CVE-2026-41080	2026-04-27 11:20	2026-04-16	Show	GitHub Exploit DB Packet Storm

2343	7.5	重要 Network	free5gc	free5gc pcf	free5GCのfree5GC等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-41135	2026-04-27 11:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

2344	5.3	警告 Network	free5gc	free5gc amf	free5GCのamf等の複数製品における予期せぬ動作に関する脆弱性	CWE-440 予期せぬ動作	CVE-2026-41136	2026-04-27 11:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

2345	8.1	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-4922	2026-04-27 11:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

2346	6.1	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-5262	2026-04-27 11:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

2347	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5377	2026-04-27 11:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

2348	8.1	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるパスの等価性の不適切な解決に関する脆弱性	CWE-41 パスの等価性の不適切な解決	CVE-2026-5816	2026-04-27 11:19	2026-04-22	Show	GitHub Exploit DB Packet Storm

2349	9.1	緊急 Network	Rapid7	velociraptor	Rapid7のvelociraptorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-6290	2026-04-27 11:19	2026-04-15	Show	GitHub Exploit DB Packet Storm

2350	5.3	警告 Network	fastify	fastify-static	fastifyのfastify-staticにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6410	2026-04-27 11:19	2026-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
661	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copied and then hashed i…	NVD-CWE-noinfo	CVE-2026-43044	2026-05-9 03:58	2026-05-2	Show	GitHub Exploit DB Packet Storm

662	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails to unmark the end of a Scatter/Gather Lis…	CWE-476 NULL Pointer Dereference	CVE-2026-43043	2026-05-9 03:57	2026-05-2	Show	GitHub Exploit DB Packet Storm

663	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mpls_forward, mpls_dump_routes) can have a…	CWE-125 Out-of-bounds Read	CVE-2026-43042	2026-05-9 03:55	2026-05-2	Show	GitHub Exploit DB Packet Storm

664	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_create() allocates and links intermediate …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43041	2026-05-9 03:54	2026-05-2	Show	GitHub Exploit DB Packet Storm

665	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak When processing Router…	CWE-909 Missing Initialization of Resource	CVE-2026-43040	2026-05-9 03:53	2026-05-2	Show	GitHub Exploit DB Packet Storm

666	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix NULL dereference in linedisp_release linedisp_release() currently retrieves the enclosing struct li…	CWE-476 NULL Pointer Dereference	CVE-2026-31753	2026-05-9 03:52	2026-05-2	Show	GitHub Exploit DB Packet Storm

667	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3_gadget_start() fails, the DRD hardware is left in g…	NVD-CWE-noinfo	CVE-2026-31754	2026-05-9 03:49	2026-05-2	Show	GitHub Exploit DB Packet Storm

668	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch emac_dispatch_skb_zc() allocates a new skb via n…	NVD-CWE-noinfo	CVE-2026-43039	2026-05-9 03:48	2026-05-2	Show	GitHub Exploit DB Packet Storm

669	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the …	NVD-CWE-noinfo	CVE-2026-43038	2026-05-9 03:47	2026-05-2	Show	GitHub Exploit DB Packet Storm

670	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue When the gadget endpoint is disabled or not yet configured, the ep->…	CWE-476 NULL Pointer Dereference	CVE-2026-31755	2026-05-9 03:45	2026-05-2	Show	GitHub Exploit DB Packet Storm