Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
51 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-23279 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
52 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-23280 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
53 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-23281 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
54 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2026-23282 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
55 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-Other
その他 		CVE-2026-23283 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
56 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-23284 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
57 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-23285 2026-05-25 10:23 2026-03-25 Show GitHub Exploit DB Packet Storm
58 9.4 緊急
Network 		ERLANG Erlang/OTP
Erlang/Inets (Inets) 		ERLANGのErlang/Inets (Inets)等の複数製品におけるHTTP リクエストスマグリングに関する脆弱性 New CWE-444
HTTP リクエストスマグリング 		CVE-2026-23941 2026-05-25 10:23 2026-03-13 Show GitHub Exploit DB Packet Storm
59 7.5 重要
Network 		NVIDIA TensorRT LLM NVIDIAのTensorRT LLMにおけるNULL ポインタデリファレンスへの未チェックの戻り値に関する脆弱性 New CWE-690
NULL ポインタデリファレンスへの未チェックの戻り値 		CVE-2026-24160 2026-05-25 10:23 2026-05-20 Show GitHub Exploit DB Packet Storm
60 7.8 重要
Local 		NVIDIA BioNeMo Framework NVIDIAのBioNeMo Frameworkにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24216 2026-05-25 10:23 2026-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 9.1 CRITICAL
Network 		- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… CWE-94
Code Injection 		CVE-2026-41258 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
912 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature 		CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
913 7.5 HIGH
Network 		- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
914 9.8 CRITICAL
Network 		- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection 		CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
915 5.5 MEDIUM
Local 		- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
916 8.8 HIGH
Network 		google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write 		CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
917 8.8 HIGH
Network 		google chrome Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write 		CVE-2026-8526 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
918 8.8 HIGH
Network 		google chrome Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi… CWE-20
 Improper Input Validation  		CVE-2026-8527 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
919 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … CWE-20
 Improper Input Validation  		CVE-2026-8528 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
920 6.2 MEDIUM
Local 		- - Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can … CWE-120
Classic Buffer Overflow 		CVE-2020-37234 2026-05-19 04:42 2026-05-17 Show GitHub Exploit DB Packet Storm