Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1991	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31555	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1992	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31556	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1993	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31557	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1994	8.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31558	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1995	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31559	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1996	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31560	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1997	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31561	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1998	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31562	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

1999	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31563	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

2000	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31564	2026-04-30 12:09	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1451	9.8	CRITICAL Network	kestra	kestra	Kestra v1.3.3 and before is vulnerable to SQL Injection. The vulnerability occurs because user-controlled input from a GET parameter is directly concatenated into an SQL query without proper sanitiza…	CWE-89 SQL Injection	CVE-2026-38428	2026-05-9 04:24	2026-05-6	Show	GitHub Exploit DB Packet Storm

1452	8.8	HIGH Network	fit2cloud	sqlbot	SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided que…	CWE-89 SQL Injection	CVE-2026-33324	2026-05-9 04:22	2026-05-6	Show	GitHub Exploit DB Packet Storm

1453	5.3	MEDIUM Network	dani-garcia	vaultwarden	Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get_org_collections_details endpoint (GET /api/organizations/{org_id}/collections/details) is missing …	CWE-862 Missing Authorization	CVE-2026-33420	2026-05-9 04:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

1454	5.3	MEDIUM Network	sandboxie-plus	sandboxie	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal incorrectly. The high…	CWE-328 Use of Weak Hash	CVE-2026-34527	2026-05-9 04:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

1455	7.5	HIGH Network	-	-	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.	-	CVE-2026-33814	2026-05-9 04:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

1456	9.8	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox escape with arbitrary code execution. Attacker code inside VM.run() obtains host process object and …	CWE-693 Protection Mechanism Failure	CVE-2026-26956	2026-05-9 04:15	2026-05-5	Show	GitHub Exploit DB Packet Storm

1457	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must be at least 1, there…	CWE-125 Out-of-bounds Read	CVE-2026-43281	2026-05-9 04:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

1458	8.8	HIGH Network	jupyter	jupyter_server	Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_d…	CWE-22 Path Traversal	CVE-2026-35397	2026-05-9 04:11	2026-05-6	Show	GitHub Exploit DB Packet Storm

1459	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic_query_port() calls ib_device_get_netdev…	CWE-476 NULL Pointer Dereference	CVE-2026-43282	2026-05-9 04:09	2026-05-6	Show	GitHub Exploit DB Packet Storm

1460	7.5	HIGH Network	thecodingmachine	gotenberg	Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-se…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-40280	2026-05-9 04:06	2026-05-6	Show	GitHub Exploit DB Packet Storm