Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3601 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31508 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
3602 8.8 重要
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-23780 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
3603 9.8 緊急
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-23781 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
3604 7.5 重要
Network 		BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-23782 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
3605 9.9 緊急
Network 		Doorman Doorman Doormanにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-30269 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
3606 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33257 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
3607 7.5 重要
Network 		PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server 		PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33260 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
3608 8.8 重要
Network 		litellm litellm LiteLLMにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル 		CVE-2026-40217 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
3609 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40517 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
3610 6.7 警告
Local 		The GnuPG Project Libgcrypt The GnuPG ProjectのLibgcryptにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-41989 2026-04-30 12:14 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314551 - - - CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows … - CVE-2024-45824 2024-09-12 23:16 2024-09-12 Show GitHub Exploit DB Packet Storm
314552 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is… NVD-CWE-noinfo
CVE-2024-44940 2024-09-12 23:10 2024-08-26 Show GitHub Exploit DB Packet Storm
314553 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: add hash if ready poll request can't complete inline If we don't, then we may lose access to it completely, leadin… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2023-52914 2024-09-12 23:07 2024-08-21 Show GitHub Exploit DB Packet Storm
314554 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 block, BLKSTOL2() returned 0, causing shift … CWE-787
 Out-of-bounds Write 		CVE-2024-44938 2024-09-12 23:05 2024-08-26 Show GitHub Exploit DB Packet Storm
314555 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our… NVD-CWE-noinfo
CVE-2022-48901 2024-09-12 23:05 2024-08-22 Show GitHub Exploit DB Packet Storm
314556 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: do not WARN_ON() if we have PageError set Whenever we do any extent buffer operations we call assert_eb_page_uptodate() to… NVD-CWE-noinfo
CVE-2022-48902 2024-09-12 23:01 2024-08-22 Show GitHub Exploit DB Packet Storm
314557 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() We are seeing crashes similar to the followin… NVD-CWE-noinfo
CVE-2022-48903 2024-09-12 22:58 2024-08-22 Show GitHub Exploit DB Packet Storm
314558 9.8 CRITICAL
Network 		sap business_objects_business_intelligence_platform In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can … CWE-862
 Missing Authorization 		CVE-2024-41730 2024-09-12 22:56 2024-08-13 Show GitHub Exploit DB Packet Storm
314559 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mode for the domain before calling the log… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-48904 2024-09-12 22:55 2024-08-22 Show GitHub Exploit DB Packet Storm
314560 5.3 MEDIUM
Network 		sap commerce In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but do… NVD-CWE-noinfo
CVE-2024-41733 2024-09-12 22:55 2024-08-13 Show GitHub Exploit DB Packet Storm