Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3061	8	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-3557	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3062	4.8	警告 Network	NSA	Emissary	NSAのEmissaryにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35571	2026-04-30 12:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

3063	8.1	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-3558	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3064	8.1	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性	CWE-323 暗号化処理のナンスおよび鍵ペアの再利用	CVE-2026-3559	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3065	8.8	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-3560	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3066	8	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-3561	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3067	8.8	重要 Adjacent	フィリップス	Hue Bridge V2 ファームウェア	フィリップスのHue Bridge V2 ファームウェアにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-3562	2026-04-30 12:29	2026-03-16	Show	GitHub Exploit DB Packet Storm

3068	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-3689	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

3069	7.4	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証時の IP アドレスへの依存に関する脆弱性	CWE-291 認証時の IP アドレスへの依存	CVE-2026-3690	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

3070	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-3691	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315641	6.5	MEDIUM Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to properly validate that the channel that comes from the sync message is a shared channel, when shared chan…	NVD-CWE-noinfo	CVE-2024-39274	2024-08-23 23:39	2024-08-2	Show	GitHub Exploit DB Packet Storm

315642	9.6	CRITICAL Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to disallow unsolicited invites to expose access to local channels, when shared channels are enabled, which …	NVD-CWE-noinfo	CVE-2024-39777	2024-08-23 23:36	2024-08-2	Show	GitHub Exploit DB Packet Storm

315643	8.7	HIGH Network	mattermost	mattermost	Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abu…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2024-39832	2024-08-23 23:35	2024-08-2	Show	GitHub Exploit DB Packet Storm

315644	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state is not idle then resolve_prepare_src() should immed…	CWE-416 Use After Free	CVE-2022-48925	2024-08-23 11:07	2024-08-22	Show	GitHub Exploit DB Packet Storm

315645	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have indio_dev->num_channels includes all ph…	CWE-787 Out-of-bounds Write	CVE-2022-48927	2024-08-23 11:05	2024-08-22	Show	GitHub Exploit DB Packet Storm

315646	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response list There's no lock for rndis response list. It could cause list corruption …	NVD-CWE-noinfo	CVE-2022-48926	2024-08-23 11:05	2024-08-22	Show	GitHub Exploit DB Packet Storm

315647	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("bpf: Support bpf program calling kernel f…	CWE-125 Out-of-bounds Read	CVE-2022-48929	2024-08-23 11:00	2024-08-22	Show	GitHub Exploit DB Packet Storm

315648	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_register() fails, a previous ioremap() is lef…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2022-48928	2024-08-23 10:58	2024-08-22	Show	GitHub Exploit DB Packet Storm

315649	4.7	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() When configfs_register_subsystem() or configfs_unregister_subsystem() …	CWE-362 Race Condition	CVE-2022-48931	2024-08-23 10:54	2024-08-22	Show	GitHub Exploit DB Packet Storm

315650	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushing system_long_wq is deadlock-prone and s…	CWE-667 Improper Locking	CVE-2022-48930	2024-08-23 10:51	2024-08-22	Show	GitHub Exploit DB Packet Storm