Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2821	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-31642	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2822	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31643	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2823	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31644	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2824	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31645	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2825	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31646	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2826	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31647	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2827	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-31648	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2828	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-31649	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2829	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31650	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

2830	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31651	2026-04-30 12:32	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
941	7.2	HIGH Network	strapi	strapi	Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in t…	CWE-89 SQL Injection	CVE-2026-22599	2026-05-16 12:25	2026-05-15	Show	GitHub Exploit DB Packet Storm

942	6.5	MEDIUM Network	strapi	strapi	Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refresh-token sessions …	CWE-613 Insufficient Session Expiration	CVE-2026-22706	2026-05-16 12:23	2026-05-15	Show	GitHub Exploit DB Packet Storm

943	5.4	MEDIUM Network	strapi	strapi	Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restr…	CWE-434 CWE-693 Unrestricted Upload of File with Dangerous Type Protection Mechanism Failure	CVE-2026-22707	2026-05-16 12:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

944	7.5	HIGH Network	strapi	strapi	Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational…	CWE-22 CWE-200 CWE-943 Path Traversal Information Exposure Improper Neutralization of Special Elements in Data Query Logic	CVE-2026-27886	2026-05-16 12:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

945	8.8	HIGH Adjacent	zyxel	wre6505_firmware	UNSUPPORTED WHEN ASSIGNED A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operat…	CWE-78 OS Command	CVE-2026-7256	2026-05-16 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

946	4.4	MEDIUM Local	zyxel	wre6505_firmware	UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker …	CWE-922 Insecure Storage of Sensitive Information	CVE-2026-7257	2026-05-16 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

947	7.5	HIGH Network	zyxel	nwa1100-n_firmware	UNSUPPORTED WHEN ASSIGNED A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs” binary in Zyxel NWA1100…	CWE-120 Classic Buffer Overflow	CVE-2026-7287	2026-05-16 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

948	6.5	MEDIUM Adjacent	pengutronix	barebox	barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the options pointer remains within …	CWE-125 Out-of-bounds Read	CVE-2026-34960	2026-05-16 12:07	2026-05-12	Show	GitHub Exploit DB Packet Storm

949	9.8	CRITICAL Network	openclaw	openclaw	A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts of the component blueb…	CWE-287 Improper Authentication	CVE-2026-8305	2026-05-16 12:06	2026-05-12	Show	GitHub Exploit DB Packet Storm

950	9.8	CRITICAL Network	libexpat_project	libexpat	`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this…	CWE-331 Insufficient Entropy	CVE-2026-7210	2026-05-16 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm