Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2731 9.1 緊急
Network 		Vikunja Vikunja Vikunjaにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-34727 2026-04-21 10:47 2026-04-10 Show GitHub Exploit DB Packet Storm
2732 5.4 警告
Network 		vLLM vLLM vLLMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34753 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
2733 6.5 警告
Network 		vLLM vLLM vLLMにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-34755 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
2734 6.5 警告
Network 		vLLM vLLM vLLMにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-34756 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
2735 8.8 重要
Network 		Electron electron Electronのelectronにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-34765 2026-04-21 10:47 2026-04-7 Show GitHub Exploit DB Packet Storm
2736 5.4 警告
Network 		Electron electron Electronのelectronにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-34777 2026-04-21 10:47 2026-04-4 Show GitHub Exploit DB Packet Storm
2737 6.5 警告
Network 		Electron electron Electronのelectronにおける複数の脆弱性 CWE-290
CWE-345
CVE-2026-34778 2026-04-21 10:47 2026-04-4 Show GitHub Exploit DB Packet Storm
2738 8.1 重要
Network 		Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34941 2026-04-21 10:47 2026-04-9 Show GitHub Exploit DB Packet Storm
2739 6.5 警告
Network 		Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-34942 2026-04-21 10:46 2026-04-9 Show GitHub Exploit DB Packet Storm
2740 7.5 重要
Network 		Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外 		CVE-2026-34943 2026-04-21 10:46 2026-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers … Update CWE-183
 Permissive List of Allowed Inputs 		CVE-2026-43574 2026-05-8 02:03 2026-05-5 Show GitHub Exploit DB Packet Storm
852 7.7 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact wi… Update CWE-862
CWE-918
 Missing Authorization
Server-Side Request Forgery (SSRF)  		CVE-2026-43573 2026-05-8 02:03 2026-05-5 Show GitHub Exploit DB Packet Storm
853 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation an… Update NVD-CWE-noinfo
CVE-2026-31723 2026-05-8 02:03 2026-05-2 Show GitHub Exploit DB Packet Storm
854 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation and r… Update NVD-CWE-noinfo
CVE-2026-31724 2026-05-8 02:00 2026-05-2 Show GitHub Exploit DB Packet Storm
855 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation and r… Update NVD-CWE-noinfo
CVE-2026-31725 2026-05-8 01:58 2026-05-2 Show GitHub Exploit DB Packet Storm
856 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled, the precheck for a valid ingress device… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-31736 2026-05-8 01:53 2026-05-2 Show GitHub Exploit DB Packet Storm
857 8.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavior that it can unmap more than requested… Update NVD-CWE-noinfo
CVE-2026-31735 2026-05-8 01:52 2026-05-2 Show GitHub Exploit DB Packet Storm
858 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Since commit 8e4f0b1ebcf2 ("bpf: use rcu_read_lock_d… Update NVD-CWE-noinfo
CVE-2026-31734 2026-05-8 01:50 2026-05-2 Show GitHub Exploit DB Packet Storm
859 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in ddsp_dsq_id @p->scx.ddsp_dsq_id can be left set (non-SCX_DSQ_INVALID) triggering a … Update NVD-CWE-noinfo
CVE-2026-31733 2026-05-8 01:44 2026-05-2 Show GitHub Exploit DB Packet Storm
860 5.7 MEDIUM
Network 		hcltech bigfix_service_management HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data. Update CWE-352
 Origin Validation Error 		CVE-2025-31957 2026-05-8 01:35 2026-05-7 Show GitHub Exploit DB Packet Storm