Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2131 9.8 緊急
Network 		ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2025-67229 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
2132 7.1 重要
Network 		ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-67230 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
2133 5.9 警告
Network 		ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-67231 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
2134 9.8 緊急
Network 		remyandrade Modern Image Gallery App Using PHP and MySQL with Source Code Remy AndradeのModern Image Gallery App Using PHP and MySQL with Source Codeにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-70457 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
2135 8.1 重要
Network 		オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-0533 2026-02-2 19:22 2026-01-22 Show GitHub Exploit DB Packet Storm
2136 8.1 重要
Network 		オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-0534 2026-02-2 19:21 2026-01-22 Show GitHub Exploit DB Packet Storm
2137 8.1 重要
Network 		オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-0535 2026-02-2 19:21 2026-01-22 Show GitHub Exploit DB Packet Storm
2138 6 警告
Local 		Amazon.com, Inc. Firecracker Amazon.com, Inc.のFirecrackerにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-1386 2026-02-2 19:21 2026-01-23 Show GitHub Exploit DB Packet Storm
2139 5.4 警告
Network 		Stack Ideas Private Limited. EasyDiscuss Stack Ideas Private Limited.のEasyDiscussにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21624 2026-02-2 19:21 2026-01-16 Show GitHub Exploit DB Packet Storm
2140 8.8 重要
Network 		Stack Ideas Private Limited. EasyDiscuss Stack Ideas Private Limited.のEasyDiscussにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-21625 2026-02-2 19:21 2026-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 8.5 HIGH
Network 		linuxfoundation tekton_pipelines Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. From 1.0.0 to before 1.11.0, the git resolver's revision parameter is passed directly as a positional argume… Update CWE-88
Argument Injection 		CVE-2026-40938 2026-04-29 00:06 2026-04-22 Show GitHub Exploit DB Packet Storm
132 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devr… Update CWE-415
 Double Free 		CVE-2026-31506 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
133 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_splice() allocates one smc_spd_priv per … Update CWE-415
 Double Free 		CVE-2026-31507 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
134 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below changed the teardown co… Update NVD-CWE-noinfo
CVE-2026-31508 2026-04-29 00:04 2026-04-22 Show GitHub Exploit DB Packet Storm
135 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and tx_wq while holding req_lock. … Update CWE-667
 Improper Locking 		CVE-2026-31509 2026-04-29 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
136 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, check if it is null. Fix the following: K… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-31510 2026-04-29 00:01 2026-04-22 Show GitHub Exploit DB Packet Storm
137 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the condition checking so mgmt_pending… Update CWE-416
 Use After Free 		CVE-2026-31511 2026-04-28 23:59 2026-04-22 Show GitHub Exploit DB Packet Storm
138 9.9 CRITICAL
Network 		saltcorn saltcorn Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.6, 1.5.6, and 1.6.0-beta.5, a SQL injection vulnerability in Saltcorn’s mobile-sync routes allows any authen… Update CWE-89
SQL Injection 		CVE-2026-41478 2026-04-28 23:58 2026-04-25 Show GitHub Exploit DB Packet Storm
139 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f72547 ("bonding: fix type confusion in bond_… Update CWE-843
Type Confusion 		CVE-2026-31502 2026-04-28 23:47 2026-04-22 Show GitHub Exploit DB Packet Storm
140 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we p… Update CWE-416
 Use After Free 		CVE-2026-31493 2026-04-28 23:45 2026-04-22 Show GitHub Exploit DB Packet Storm