Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2221 4.8 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24784 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2222 5.4 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24833 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2223 5.4 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24836 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2224 5.4 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24837 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2225 5.4 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24838 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2226 6.1 警告
Network 		Dokploy Dokploy Dokployにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-24839 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2227 8.8 重要
Network 		Dokploy Dokploy Dokployにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-24840 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2228 9.9 緊急
Network 		Dokploy Dokploy DokployにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-24841 2026-02-6 10:36 2026-01-28 Show GitHub Exploit DB Packet Storm
2229 - - 三菱電機 MELSEC iQ-R シリーズ 三菱電機製FA製品における専用プロトコル通信およびSLMP通信からの入力内容に対する検証不備の脆弱性 CWE-1284
入力で指定された数量の不適切な検証 		CVE-2025-15080 2026-02-6 09:36 2026-02-5 Show GitHub Exploit DB Packet Storm
2230 7.2 重要
Network 		Google Google Security Operations SOAR GoogleのGoogle Security Operations SOARにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2025-13428 2026-02-5 15:51 2025-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 4.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths… Update CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-41339 2026-04-30 02:06 2026-04-24 Show GitHub Exploit DB Packet Storm
382 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the client request and passes it dire… Update NVD-CWE-noinfo
CVE-2026-31612 2026-04-30 02:00 2026-04-25 Show GitHub Exploit DB Packet Storm
383 8.6 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each ACE SID against sid_unix_NFS_mode and on m… Update NVD-CWE-noinfo
CVE-2026-31611 2026-04-30 01:56 2026-04-25 Show GitHub Exploit DB Packet Storm
384 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder calls action callbacks incremen… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-31610 2026-04-30 01:51 2026-04-25 Show GitHub Exploit DB Packet Storm
385 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch_flush() already calls smbd_fr… Update CWE-415
 Double Free 		CVE-2026-31609 2026-04-30 01:45 2026-04-25 Show GitHub Exploit DB Packet Storm
386 3.5 LOW
Network 		- - A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the arg… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7390 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
387 7.3 HIGH
Network 		- - A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sort_asc leads… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7389 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
388 4.7 MEDIUM
Network 		- - A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/logic/FilemanagerLogic.php of the component Template File Handler. Executing a m… New CWE-74
CWE-94
Injection
Code Injection 		CVE-2026-7388 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
389 7.3 HIGH
Network 		- - A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown function of the file src/mail_mcp_server.py. Executing a manipulation of the argument message_ids can lead to pa… New CWE-22
Path Traversal 		CVE-2026-7386 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
390 8.8 HIGH
Network 		- - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Com… New CWE-78
OS Command  		CVE-2026-6849 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm