Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1911 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用 		CVE-2026-6751 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1912 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6752 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1913 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6753 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1914 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6754 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1915 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-6755 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1916 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-6756 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1917 6.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2026-6757 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1918 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6758 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
1919 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6759 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
1920 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6760 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 7.3 HIGH
Network 		- - A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The… CWE-259
CWE-798
Use of Hard-coded Password 
 Use of Hard-coded Credentials 		CVE-2026-7579 2026-05-4 23:16 2026-05-1 Show GitHub Exploit DB Packet Storm
922 7.2 HIGH
Network 		- - SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attack… CWE-89
SQL Injection 		CVE-2026-7435 2026-05-4 23:16 2026-05-1 Show GitHub Exploit DB Packet Storm
923 9.6 CRITICAL
Network 		- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. … CWE-22
Path Traversal 		CVE-2026-5166 2026-05-4 23:16 2026-04-30 Show GitHub Exploit DB Packet Storm
924 8.8 HIGH
Network 		- - Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus … CWE-59
Link Following 		CVE-2026-5161 2026-05-4 23:16 2026-04-30 Show GitHub Exploit DB Packet Storm
925 8.8 HIGH
Network 		- - Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects P… CWE-93
CRLF Injection 		CVE-2026-5140 2026-05-4 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
926 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-4928 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
927 6.7 MEDIUM
Local 		- - In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti… CWE-843
Type Confusion 		CVE-2026-20451 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
928 6.5 MEDIUM
Adjacent 		- - In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with… CWE-617
 Reachable Assertion 		CVE-2026-20450 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
929 6.5 MEDIUM
Adjacent 		- - In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with n… CWE-120
Classic Buffer Overflow 		CVE-2026-20449 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
930 6.7 MEDIUM
Local 		- - In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System priv… CWE-280
Improper Handling of Insufficient Permissions or Privileges  		CVE-2026-20448 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm