Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
481	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31408	2026-05-22 10:56	2026-04-6	Show	GitHub Exploit DB Packet Storm

482	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31409	2026-05-22 10:56	2026-04-6	Show	GitHub Exploit DB Packet Storm

483	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31410	2026-05-22 10:56	2026-04-6	Show	GitHub Exploit DB Packet Storm

484	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31411	2026-05-22 10:56	2026-04-8	Show	GitHub Exploit DB Packet Storm

485	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-31412	2026-05-22 10:56	2026-04-10	Show	GitHub Exploit DB Packet Storm

486	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31413	2026-05-22 10:56	2026-04-12	Show	GitHub Exploit DB Packet Storm

487	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31414	2026-05-22 10:56	2026-04-13	Show	GitHub Exploit DB Packet Storm

488	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-31415	2026-05-22 10:56	2026-04-13	Show	GitHub Exploit DB Packet Storm

489	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31416	2026-05-22 10:56	2026-04-13	Show	GitHub Exploit DB Packet Storm

490	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-31417	2026-05-22 10:56	2026-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1751	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-269 Improper Privilege Management	CVE-2026-8955	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1752	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-269 Improper Privilege Management	CVE-2026-8952	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1753	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid…	-	CVE-2026-8342	2026-05-21 02:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

1754	7.1	HIGH Network	-	-	A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID Connect (OIDC) clie…	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-7571	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1755	7.5	HIGH Network	-	-	A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim i…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-7507	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1756	8.1	HIGH Network	-	-	A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentiall…	CWE-601 Open Redirect	CVE-2026-7504	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1757	7.5	HIGH Network	-	-	A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high …	CWE-1286 Improper Validation of Syntactic Correctness of Input	CVE-2026-7307	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1758	6.8	MEDIUM Network	-	-	A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. By knowing or obtai…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-4630	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1759	9.8	CRITICAL Network	-	-	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFil…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-47323	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

1760	8.8	HIGH Network	apache	ofbiz	Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. This issue affects Ap…	CWE-94 CWE-95 Code Injection Eval Injection	CVE-2026-46586	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm