Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3271 3.1 低
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-7360 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
3272 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7361 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
3273 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7363 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
3274 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-59031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3275 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-0394 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3276 8.2 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-24031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3277 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-27855 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3278 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における認証に関する脆弱性 CWE-287
CWE-Other
CVE-2026-27856 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3279 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-27860 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
3280 8.4 重要
Local 		Anthropic PBC Claude Code
Claude Agent SDK 		Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35020 2026-05-1 10:39 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315911 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fai… CWE-476
 NULL Pointer Dereference 		CVE-2024-43821 2024-09-4 02:49 2024-08-17 Show GitHub Exploit DB Packet Storm
315912 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() Instead of getting the epc_features fr… CWE-476
 NULL Pointer Dereference 		CVE-2024-43824 2024-09-4 02:48 2024-08-17 Show GitHub Exploit DB Packet Storm
315913 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_M… CWE-476
 NULL Pointer Dereference 		CVE-2024-43819 2024-09-4 02:47 2024-08-17 Show GitHub Exploit DB Packet Storm
315914 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjust error handling in case of absent codec device acpi_get_first_physical_node() can return NULL in several cases (… CWE-476
 NULL Pointer Dereference 		CVE-2024-43818 2024-09-4 02:45 2024-08-17 Show GitHub Exploit DB Packet Storm
315915 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again 1. After the skb_se… NVD-CWE-noinfo
CVE-2024-43817 2024-09-4 02:41 2024-08-17 Show GitHub Exploit DB Packet Storm
315916 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot reports uninitialized value access issue as below:… CWE-908
 Use of Uninitialized Resource 		CVE-2024-42311 2024-09-4 02:38 2024-08-17 Show GitHub Exploit DB Packet Storm
315917 9.8 CRITICAL
Network 		chartist chartist Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2024-45435 2024-09-4 02:23 2024-08-29 Show GitHub Exploit DB Packet Storm
315918 - - - MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. - CVE-2024-42991 2024-09-4 01:35 2024-09-4 Show GitHub Exploit DB Packet Storm
315919 - - - ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass. - CVE-2024-45622 2024-09-4 01:35 2024-09-3 Show GitHub Exploit DB Packet Storm
315920 - - - D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the ATP binary that handles PHP HTTP GET requests for the Apache H… - CVE-2024-45623 2024-09-4 00:35 2024-09-3 Show GitHub Exploit DB Packet Storm