Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2871 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23439 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2872 4.7 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-23440 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2873 4.7 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-23441 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2874 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23442 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2875 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23443 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2876 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-23444 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2877 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23445 2026-04-27 11:24 2026-04-3 Show GitHub Exploit DB Packet Storm
2878 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23446 2026-04-27 11:23 2026-04-3 Show GitHub Exploit DB Packet Storm
2879 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-23447 2026-04-27 11:23 2026-04-3 Show GitHub Exploit DB Packet Storm
2880 4.8 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-25133 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314671 - - - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where co… - CVE-2024-38807 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314672 - - - Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple tim… - CVE-2024-43105 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314673 - - - The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a… - CVE-2024-3282 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314674 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Ph… - CVE-2024-42762 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314675 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via sched… - CVE-2024-42761 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314676 - - - An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}. - CVE-2024-45201 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314677 - - - NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory. - CVE-2024-7634 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314678 - - - Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php. - CVE-2024-42767 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314679 - - - Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php. - CVE-2024-42776 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
314680 - - - An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room e… - CVE-2024-42775 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm