Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3721	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31568	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

3722	7.3	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31569	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

3723	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31570	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

3724	6.1	警告 Network	CyberPanel	CyberPanel	CyberPanelにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41472	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3725	9.1	緊急 Network	CyberPanel	CyberPanel	CyberPanelにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41473	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3726	8.2	重要 Local	レッドハット	Red Hat Advanced Cluster Management for Kubernetes	レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-4740	2026-04-30 12:08	2026-04-7	Show	GitHub Exploit DB Packet Storm

3727	9.8	緊急 Network	Pipecat	Pipecat	Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-62373	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

3728	7.8	重要 Local	Amazon.com, Inc.	Kiro IDE	Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-0830	2026-04-30 12:08	2026-01-9	Show	GitHub Exploit DB Packet Storm

3729	5.4	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-25720	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3730	9.8	緊急 Network	huggingface	LeRobot	huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-25874	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
321	3.3	LOW Local	-	-	A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null … New	CWE-404 CWE-476 Improper Resource Shutdown or Release NULL Pointer Dereference	CVE-2026-9503	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

322	5.3	MEDIUM Local	-	-	A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap… New	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-9502	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

323	3.3	LOW Local	-	-	A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipul… New	CWE-617 Reachable Assertion	CVE-2026-9501	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

324	3.7	LOW Network	-	-	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. New	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

325	3.1	LOW Network	-	-	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. New	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

326	3.7	LOW Network	-	-	PuTTY 0.72 before 0.84 has a double free in RSA KEX. New	CWE-415 Double Free	CVE-2026-48850	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

327	-		-	-	Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which a… New	CWE-202 Exposure of Sensitive Information Through Data Queries	CVE-2026-42797	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

328	-		-	-	Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted c… New	CWE-653 Improper Isolation or Compartmentalization	CVE-2026-42782	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

329	4.3	MEDIUM Network	-	-	Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery. This issue affects Organization chart: from n/a through 1.7.5. New	CWE-352 Origin Validation Error	CVE-2026-24597	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

330	6.5	MEDIUM Network	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through … New	CWE-352 Origin Validation Error	CVE-2026-24574	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed