Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2061	7.5	重要 Network	Novell	eDirectory	ARCA SOLUTIONS INC.のeDirectoryにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25675	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2062	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2063	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2064	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2065	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2066	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

2067	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

2068	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

2069	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23778	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

2070	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23779	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
341	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot reported a general protection fault in vidt… Update	CWE-476 NULL Pointer Dereference	CVE-2026-31599	2026-04-30 05:12	2026-04-25	Show	GitHub Exploit DB Packet Storm

342	7.5	HIGH Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc… Update	CWE-667 Improper Locking	CVE-2026-31598	2026-04-30 05:10	2026-04-25	Show	GitHub Exploit DB Packet Storm

343	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already… Update	CWE-415 Double Free	CVE-2026-31608	2026-04-30 05:03	2026-04-25	Show	GitHub Exploit DB Packet Storm

344	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind again, cdev_init reinitialized the cdev… Update	NVD-CWE-noinfo	CVE-2026-31606	2026-04-30 05:00	2026-04-25	Show	GitHub Exploit DB Packet Storm

345	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide… Update	CWE-369 Divide By Zero	CVE-2026-31605	2026-04-30 04:36	2026-04-25	Show	GitHub Exploit DB Packet Storm

346	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while … Update	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-31604	2026-04-30 04:21	2026-04-25	Show	GitHub Exploit DB Packet Storm

347	8.0	HIGH Network	microsoft	power_apps	Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. Update	CWE-427 Uncontrolled Search Path Element	CVE-2026-32172	2026-04-30 04:11	2026-04-24	Show	GitHub Exploit DB Packet Storm

348	10.0	CRITICAL Network	microsoft	purview_ediscovery	Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-26150	2026-04-30 04:10	2026-04-24	Show	GitHub Exploit DB Packet Storm

349	9.8	CRITICAL Network	apache	mina	Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname allowlist and allowin… Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-41635	2026-04-30 04:08	2026-04-27	Show	GitHub Exploit DB Packet Storm

350	9.8	CRITICAL Network	apache	mina	The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in… Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-41409	2026-04-30 04:08	2026-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed