Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3101 9.8 緊急
Network
ThemeMove MaxCoach ThemeMoveのWordPress用MaxCoachにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン
CVE-2025-58206 2026-01-30 14:14 2025-09-5 Show GitHub Exploit DB Packet Storm
3102 9.8 緊急
Network
ThemeMove Makeaholic ThemeMoveのWordPress用Makeaholicにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-58210 2026-01-30 14:13 2025-09-3 Show GitHub Exploit DB Packet Storm
3103 7.5 重要
Network
DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) Firmware DwyerOmegaのIsensix Advanced Remote Monitoring System (ARMS) FirmwareにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2025-59379 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
3104 9.8 緊急
Network
H3C H3C Magic BA1500L Firmware
H3C MC102-G Firmware
H3CのH3C Magic BA1500L Firmware等の複数製品における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-60262 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
3105 9.8 緊急
Network
Blue Access Technologies Inc. Cobalt X1 Blue Access Technologies Inc.のCobalt X1における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2025-60534 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
3106 6.5 警告
Network
Marquitos mcp-shell Marquitosのmcp-shellにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2025-61489 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
3107 9.8 緊急
Network
NJHYST HY511 POE core devices Firmware NJHYSTのHY511 POE core devices Firmwareにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存
CVE-2025-65212 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
3108 7.5 重要
Network
OpenAirInterface Software Alliance OpenAir CN 5G for AMF OpenAirInterface Software AllianceのOpenAir CN 5G for AMFにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2025-65805 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
3109 7.5 重要
Network
OpenAirInterface Software Alliance OpenAir CN 5G for AMF OpenAirInterface Software AllianceのOpenAir CN 5G for AMFにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2025-66786 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
3110 7.5 重要
Network
efforthye fast-filesystem-mcp efforthyeのfast-filesystem-mcpにおけるパストラバーサルの脆弱性 CWE-24
パストラバーサル (../filedir)
CVE-2025-67364 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes … New - CVE-2026-43222 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
322 - - - In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfully but fails to su… New - CVE-2026-43223 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
323 - - - In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skb_may_tx_timestamp() skb_may_tx_timestamp() may acquire sock::sk_callback_lock. The lock must not be take… New - CVE-2026-43216 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
324 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_area_dma() fails, which could only happe… New - CVE-2026-43224 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
325 - - - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In that case, the all… New - CVE-2026-43225 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
326 - - - In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS connections carry a state "rds_conn_path::cp_state" and transitions from one state… New - CVE-2026-43226 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
327 - - - In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as both a clocksource and a clocke… New - CVE-2026-43227 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
328 - - - In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super … New - CVE-2026-43228 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
329 - - - In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When canceling the reconnect worker, care must be taken to reset the reconnect-pending bit. … New - CVE-2026-43230 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
330 - - - In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unregistration to the beginning of … New - CVE-2026-43229 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm