Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2031 6.5 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40160 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
2032 8.1 重要
Network 		b3log SiYuan B3logのSiYuanにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40259 2026-04-21 10:44 2026-04-16 Show GitHub Exploit DB Packet Storm
2033 8.4 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品における複数の脆弱性 CWE-426
CWE-94
CVE-2026-40287 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2034 9.8 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品における複数の脆弱性 CWE-78
CWE-94
CVE-2026-40288 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2035 9.1 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40289 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2036 9.8 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40315 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2037 8.5 重要
Network 		b3log SiYuan B3logのSiYuanにおけるパストラバーサルの脆弱性 CWE-24
パストラバーサル (../filedir) 		CVE-2026-40318 2026-04-21 10:44 2026-04-16 Show GitHub Exploit DB Packet Storm
2038 9 緊急
Network 		b3log SiYuan B3logのSiYuanにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-40322 2026-04-21 10:44 2026-04-16 Show GitHub Exploit DB Packet Storm
2039 7.2 重要
Network 		フォーティネット Fortiweb フォーティネットのFortiwebにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-40688 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2040 6.5 警告
Network 		DataEase DataEase DataEaseにおける許容された入力値の許可リストに関する脆弱性 CWE-183
許容された入力値の許可リスト 		CVE-2026-40899 2026-04-21 10:44 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Currently, AMDGPU_VA_RESERVED_TRAP_SIZE is hardcoded to 8KB, while KFD_CW… New - CVE-2026-31765 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
472 - - - In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing values based on the… New - CVE-2026-31767 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
473 - - - In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) Fix division by zero in occ_show_power_1() In occ_show_power_1() case 1, the accumulator is divided by update_tag wi… New - CVE-2026-31770 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
474 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver changed the assignment of atc->da… New - CVE-2026-31775 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
475 - - - In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data() can return 0, indicating a zero-length… New - CVE-2026-43005 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
476 - - - In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio() returns an ERR_PTR() on failure, not NUL… New - CVE-2026-43008 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
477 - - - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error o… New - CVE-2026-43013 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
478 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in init_card The loop creates a whitespace-stripped copy of the card shortname where `l… New - CVE-2026-31778 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
479 - - - In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends a QAIC_TRANS_DEACTIVATE_FROM_… New - CVE-2026-43007 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm
480 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. Howe… New - CVE-2026-43010 2026-05-2 00:24 2026-05-2 Show GitHub Exploit DB Packet Storm