Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2841	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-31662	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2842	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31663	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2843	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31664	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2844	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31665	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2845	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31666	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2846	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31667	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2847	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31668	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2848	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31669	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2849	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31670	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

2850	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31671	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
961	5.5	MEDIUM Local	fortinet	fortitoken_mobile	A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow atta…	CWE-926 Improper Export of Android Application Components	CVE-2026-44279	2026-05-16 10:57	2026-05-13	Show	GitHub Exploit DB Packet Storm

962	4.4	MEDIUM Local	microsoft	365_copilot	Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.	CWE-284 NVD-CWE-Other Improper Access Control	CVE-2026-41100	2026-05-16 10:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

963	8.8	HIGH Network	microsoft	data_formulator	Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.	CWE-94 Code Injection	CVE-2026-41094	2026-05-16 10:47	2026-05-13	Show	GitHub Exploit DB Packet Storm

964	9.0	CRITICAL Network	-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a package's plugin.json (and the equivale…	CWE-79 CWE-116 Cross-site Scripting Improper Encoding or Escaping of Output	CVE-2026-45375	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

965	8.3	HIGH Network	-	-	python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell comman…	CWE-78 OS Command	CVE-2026-45369	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

966	7.8	HIGH Local	saitoha	libsixel	libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixel_encode_highcolor's allocation size calculation can lead to a heap bu…	CWE-122 CWE-190 Heap-based Buffer Overflow Integer Overflow or Wraparound	CVE-2026-44636	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

967	5.5	MEDIUM Local	openimageio	openimageio	OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check in TGAInput::decode_…	CWE-125 Out-of-bounds Read	CVE-2026-43996	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

968	7.8	HIGH Local	openimageio	openimageio	OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, softimageinput.cpp:469 (mixed RLE) an…	CWE-787 Out-of-bounds Write	CVE-2026-43904	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

969	-		-	-	ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable through the type parameter on the auth…	CWE-89 SQL Injection	CVE-2026-42847	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

970	-		-	-	mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end unauthorized remote command execution vulnerability. Due to the lack of authentication on the /modify_crond a…	CWE-78 CWE-862 OS Command Missing Authorization	CVE-2026-41315	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed