Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3201	5.4	警告 Network	Bludit	Bludit	Bluditにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-4420	2026-04-21 10:44	2026-04-7	Show	GitHub Exploit DB Packet Storm

3202	8.8	重要 Network	FreeBSD	FreeBSD	FreeBSDにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-4747	2026-04-21 10:44	2026-03-26	Show	GitHub Exploit DB Packet Storm

3203	7.1	重要 Local	gimp	gimp	gimpにおける境界条件の判定に関する脆弱性	CWE-193 境界条件の判定	CVE-2026-4887	2026-04-21 10:44	2026-03-26	Show	GitHub Exploit DB Packet Storm

3204	5.3	警告 Network	langflow	langflow	langflowにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-5022	2026-04-21 10:44	2026-03-27	Show	GitHub Exploit DB Packet Storm

3205	6.5	警告 Network	langflow	langflow	langflowにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-5025	2026-04-21 10:43	2026-03-27	Show	GitHub Exploit DB Packet Storm

3206	5.4	警告 Network	langflow	langflow	langflowにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-5026	2026-04-21 10:43	2026-03-27	Show	GitHub Exploit DB Packet Storm

3207	5.4	警告 Network	lfprojects	mlflow	lfprojectsのmlflowにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33865	2026-04-21 10:43	2026-04-7	Show	GitHub Exploit DB Packet Storm

3208	4.3	警告 Network	lfprojects	mlflow	lfprojectsのmlflowにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-33866	2026-04-21 10:43	2026-04-7	Show	GitHub Exploit DB Packet Storm

3209	9.1	緊急 Network	Mervin Praison (MervinPraison)	PraisonAI	Mervin Praison (MervinPraison)のPraisonAIにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-40313	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

3210	6.5	警告 Network	PAC4J	pac4j	PAC4Jのpac4jにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-40458	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
711	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network mess… Update	CWE-787 Out-of-bounds Write	CVE-2026-43125	2026-05-9 02:57	2026-05-6	Show	GitHub Exploit DB Packet Storm

712	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol ops rather individually, and pending ca… Update	NVD-CWE-noinfo	CVE-2026-43126	2026-05-9 02:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

713	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reported a circular locking dependency between wnd->rw_lock (sbi->… Update	CWE-667 Improper Locking	CVE-2026-43127	2026-05-9 02:54	2026-05-6	Show	GitHub Exploit DB Packet Storm

714	9.4	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case fails unexpectedly when avx2 matching fun… Update	NVD-CWE-noinfo	CVE-2026-43114	2026-05-9 02:54	2026-05-6	Show	GitHub Exploit DB Packet Storm

715	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure path In ib_umem_dmabuf_get_pinned_with_dma_device(), the call to ib_umem_dmabuf_ma… Update	CWE-415 Double Free	CVE-2026-43128	2026-05-9 02:52	2026-05-6	Show	GitHub Exploit DB Packet Storm

716	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: srcu: Use irq_work to start GP in tiny SRCU Tiny SRCU's srcu_gp_start_if_needed() directly calls schedule_work(), which acquires … Update	NVD-CWE-noinfo	CVE-2026-43115	2026-05-9 02:51	2026-05-6	Show	GitHub Exploit DB Packet Storm

717	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master c… Update	CWE-362 Race Condition	CVE-2026-43116	2026-05-9 02:49	2026-05-6	Show	GitHub Exploit DB Packet Storm

718	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/vt-d: Don't issue AT… Update	NVD-CWE-noinfo	CVE-2026-43130	2026-05-9 02:44	2026-05-6	Show	GitHub Exploit DB Packet Storm

719	9.1	CRITICAL Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() If overlay is used on top of btrfs, dentry->d_s… Update	NVD-CWE-noinfo	CVE-2026-43117	2026-05-9 02:43	2026-05-6	Show	GitHub Exploit DB Packet Storm

720	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer derefere… Update	CWE-476 NULL Pointer Dereference	CVE-2026-43131	2026-05-9 02:42	2026-05-6	Show	GitHub Exploit DB Packet Storm