Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
841 5.3 警告
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-41606 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
842 6.5 警告
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-41607 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
843 7.5 重要
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-41636 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
844 7.5 重要
Network
Marked project Marked Marked projectのMarkedにおける複数の脆弱性 CWE-400
CWE-674
CWE-835
CVE-2026-41680 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
845 9.8 緊急
Network
Apache Software Foundation Apache Pony Mail Apache Software FoundationのApache Pony MailにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-41873 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
846 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41908 2026-04-30 10:58 2026-04-23 Show GitHub Exploit DB Packet Storm
847 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41909 2026-04-30 10:58 2026-04-23 Show GitHub Exploit DB Packet Storm
848 8.8 重要
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現
CVE-2026-4296 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
849 8.8 重要
Network
Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-4342 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
850 6.5 警告
Network
レッドハット
libarchive
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Red Hat Hardened Images
libarchive
libarchive等の複数ベンダの製品における整数への不適切なビットシフトに関する脆弱性 CWE-1335
整数への不適切なビットシフト
CVE-2026-4426 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) but … - CVE-2026-42485 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
482 - - - Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bus_name. - CVE-2026-37538 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
483 8.1 HIGH
Adjacent
- - collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At… - CVE-2026-37537 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
484 8.8 HIGH
Adjacent
- - miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) receives … - CVE-2026-37536 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
485 7.1 HIGH
Adjacent
- - openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is us… - CVE-2026-37535 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
486 - - - Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arb… - CVE-2026-37534 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
487 7.1 HIGH
Adjacent
- - AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-89), the payload_length for a Single Frame is extracted fro… - CVE-2026-37532 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
488 9.8 CRITICAL
Network
- - AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. The is_valid_filename fu… - CVE-2026-37531 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
489 - - - AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD… - CVE-2026-37530 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
490 7.8 HIGH
Local
- - AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, Debug, Token, slist) without authenticatio… - CVE-2026-37526 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm