Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1571 6.1 警告
Network 		Apostrophe Technologies sanitize-html
ApostropheCMS 		Apostrophe TechnologiesのApostropheCMS等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40186 2026-04-27 11:18 2026-04-15 Show GitHub Exploit DB Packet Storm
1572 8.8 重要
Network 		Composer Composer Composerにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-40261 2026-04-27 11:18 2026-04-15 Show GitHub Exploit DB Packet Storm
1573 9.8 緊急
Network 		Phpscriptsmall Advance Gift Shop Pro Script PhpscriptsmallのAdvance Gift Shop Pro ScriptにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2019-25680 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
1574 9.8 緊急
Network 		WISDOM Pegasus CMS WISDOMのPegasus CMSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2019-25687 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
1575 8.8 重要
Network 		Nextcloud
windmill project		 windmill
Nextcloud Flow 		Nextcloud等の複数ベンダの製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-22683 2026-04-27 11:18 2026-04-7 Show GitHub Exploit DB Packet Storm
1576 7.5 重要
Network 		XiangShan NEMU XiangShanのNEMUにおける複数の脆弱性 CWE-1287
CWE-131
CVE-2026-29645 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
1577 9.8 緊急
Network 		XiangShan NEMU XiangShanのNEMUにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-29649 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
1578 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-125
CWE-193
CVE-2026-32605 2026-04-27 11:18 2026-04-13 Show GitHub Exploit DB Packet Storm
1579 9.6 緊急
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-1284
CWE-190
CWE-20
CWE-345
CVE-2026-33471 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
1580 9.8 緊急
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-33608 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
711 - - - In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit xfrm_policy_fini() frees the policy_bydst hash tables after flushing the poli… New - CVE-2026-43091 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
712 - - - In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AF_XDP bind currently accepts zero-copy pool configurations without verifying… New - CVE-2026-43092 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
713 - - - In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series [1]. The actual issue is an overflow of 16-bit … New - CVE-2026-43080 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
714 - - - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error path When ip_vs_bind_scheduler() succeeds in ip_vs_add_service(), the local varia… New - CVE-2026-43086 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
715 - - - In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdp_umem_reg() cou… New - CVE-2026-43093 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
716 - - - In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Disable all pin interrupts during probe A chip being probed may have the interrupt-on-change feature enabled o… New - CVE-2026-43087 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
717 - - - In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY exports PF_KEY export paths use `pfkey_sockaddr_size()` when reserving sockaddr… New - CVE-2026-43088 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
718 - - - In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hyper-V ops table Commit a7075f501bd3 ("ixgbevf: fix mailbox API compatibility by n… New - CVE-2026-43094 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
719 - - - In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Fix errors in IRQ cleanup IRQs are enabled through sdca_irq_populate() from component probe using devm_request_thread… New - CVE-2026-43095 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
720 - - - In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests access memory regions … New - CVE-2026-43096 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm