Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253161 4.3 警告 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0893 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
253162 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0453 2010-05-14 18:42 2010-02-3 Show GitHub Exploit DB Packet Storm
253163 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0889 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253164 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0891 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253165 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0894 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253166 6.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0885 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253167 7.1 危険 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0896 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
253168 7.2 危険 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0882 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
253169 7.5 危険 オラクル - Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0897 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
253170 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 8.8 HIGH
Network 		- - Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus allows Authentication Bypass. This issue affects Pardus: … New CWE-93
CRLF Injection 		CVE-2026-5140 2026-04-30 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
412 - - - TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function. New - CVE-2026-36841 2026-04-30 00:16 2026-04-30 Show GitHub Exploit DB Packet Storm
413 9.8 CRITICAL
Network 		pipecat pipecat Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSerializer` – an opti… Update CWE-502
 Deserialization of Untrusted Data 		CVE-2025-62373 2026-04-30 00:00 2026-04-24 Show GitHub Exploit DB Packet Storm
414 6.1 MEDIUM
Network 		cure53 dompurify DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TA… Update CWE-79
CWE-183
Cross-site Scripting
 Permissive List of Allowed Inputs 		CVE-2026-41240 2026-04-29 23:58 2026-04-24 Show GitHub Exploit DB Packet Storm
415 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do_encryption(), introduced by c… Update CWE-416
 Use After Free 		CVE-2026-31533 2026-04-29 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm
416 7.5 HIGH
Network 		openclaw openclaw OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote attackers can submit… Update CWE-799
 Improper Control of Interaction Frequency 		CVE-2026-41346 2026-04-29 23:44 2026-04-24 Show GitHub Exploit DB Packet Storm
417 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restrictions. Authorized Disco… Update CWE-863
 Incorrect Authorization 		CVE-2026-41348 2026-04-29 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
418 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers can exploit this to … Update CWE-862
 Missing Authorization 		CVE-2026-41349 2026-04-29 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
419 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing vCPU state to its associated VM… Update NVD-CWE-noinfo
CVE-2026-31593 2026-04-29 23:29 2026-04-25 Show GitHub Exploit DB Packet Storm
420 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is … Update NVD-CWE-noinfo
CVE-2026-31594 2026-04-29 23:27 2026-04-25 Show GitHub Exploit DB Packet Storm