Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1741 5.3 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift レッドハットのMirror Registry for Red Hat OpenShiftにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2025-14243 2026-04-23 10:17 2026-04-8 Show GitHub Exploit DB Packet Storm
1742 9 緊急
Network 		XWiki Blog Application XWikiのBlog Applicationにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-66024 2026-04-23 10:17 2026-03-4 Show GitHub Exploit DB Packet Storm
1743 6.5 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift
Quay 		レッドハットのMirror Registry for Red Hat OpenShift等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2377 2026-04-23 10:17 2026-04-8 Show GitHub Exploit DB Packet Storm
1744 7.2 重要
Network 		langchain Langgraph langchainのLanggraphにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-28277 2026-04-23 10:16 2026-03-5 Show GitHub Exploit DB Packet Storm
1745 7.5 重要
Network 		nekename OpenDeck nekenameのOpenDeckにおける複数の脆弱性 CWE-22
CWE-24
CVE-2026-28427 2026-04-23 10:16 2026-03-4 Show GitHub Exploit DB Packet Storm
1746 6.3 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift
Quay 		レッドハットのMirror Registry for Red Hat OpenShift等の複数製品におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-32589 2026-04-23 10:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1747 8.8 重要
Network 		レッドハット Mirror Registry for Red Hat OpenShift
Quay 		レッドハットのMirror Registry for Red Hat OpenShift等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-32590 2026-04-23 10:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1748 5.5 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift
Quay 		レッドハットのMirror Registry for Red Hat OpenShift等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-32591 2026-04-23 10:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1749 7.5 重要
Network 		trailofbits rfc3161-client trailofbitsのrfc3161-clientにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-33753 2026-04-23 10:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1750 8.8 重要
Network 		Nozomi Networks Inc. Guardian HederaのGuardianにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-39911 2026-04-23 10:16 2026-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 7.5 HIGH
Network 		wireshark wireshark OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-6520 2026-05-2 01:37 2026-04-30 Show GitHub Exploit DB Packet Storm
502 4.3 MEDIUM
Network 		- - A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes denial of service. … CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7586 2026-05-2 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm
503 4.3 MEDIUM
Network 		- - A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manip… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7585 2026-05-2 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm
504 7.5 HIGH
Network 		- - Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, lead… CWE-122
CWE-176
Heap-based Buffer Overflow
 Improper Handling of Unicode Encoding 		CVE-2026-7040 2026-05-2 01:16 2026-04-27 Show GitHub Exploit DB Packet Storm
505 8.8 HIGH
Network 		- - TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution CWE-122
Heap-based Buffer Overflow 		CVE-2026-5402 2026-05-2 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
506 8.1 HIGH
Network 		freebsd freebsd As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when reque… CWE-122
Heap-based Buffer Overflow 		CVE-2026-42512 2026-05-2 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
507 8.1 HIGH
Network 		freebsd freebsd The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by … CWE-149
 Improper Neutralization of Quoting Syntax 		CVE-2026-42511 2026-05-2 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
508 - - - Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues include an out-of-bound… - CVE-2026-42481 2026-05-2 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm
509 - - - A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted … - CVE-2026-42480 2026-05-2 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm
510 - - - SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.php. - CVE-2026-42475 2026-05-2 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm