Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3221 5.3 警告
Network 		franklioxygen MyTube franklioxygenのMyTubeにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-24140 2026-02-4 18:40 2026-01-24 Show GitHub Exploit DB Packet Storm
3222 6.1 警告
Network 		butor team
Ghost Foundation		 Ghost
Portal 		Ghost FoundationのGhost等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24778 2026-02-4 18:40 2026-01-27 Show GitHub Exploit DB Packet Storm
3223 5.4 警告
Network 		OpenEMR OpenEMR OpenEMRにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-47817 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
3224 5.4 警告
Network 		Commvault Systems, Inc Commvault Commvault Systems, IncのCommvaultにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-12776 2026-02-4 18:40 2026-01-7 Show GitHub Exploit DB Packet Storm
3225 7.5 重要
Network 		Html2Pdf project Html2Pdf Apryse Software Inc.のHTML2PDFにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-56589 2026-02-4 18:40 2026-01-22 Show GitHub Exploit DB Packet Storm
3226 8.8 重要
Network 		ZwiiCMS ZwiiCMS ZwiiCMSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-57130 2026-02-4 18:40 2025-11-5 Show GitHub Exploit DB Packet Storm
3227 5.4 警告
Network 		The Starware WorklogPRO The StarwareのWorklogPROにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-57681 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
3228 7.5 重要
Network 		ollama ollama ollamaにおける複数の脆弱性 CWE-20
CWE-400
CVE-2025-66959 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
3229 7.5 重要
Network 		ollama ollama ollamaにおける複数の脆弱性 CWE-20
CWE-400
CVE-2025-66960 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
3230 7.5 重要
Network 		Absolute Software secure access Absolute Softwareのsecure accessにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-0517 2026-02-4 18:40 2026-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
531 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode kaweth_set_rx_mode(), the ndo_set_rx_mode callback, calls ne… New - CVE-2026-43180 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
532 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QU… New - CVE-2026-43178 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
533 8.8 HIGH
Adjacent 		- - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 ("wifi: rtw89: pci: validate… New - CVE-2026-43176 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
534 8.8 HIGH
Adjacent 		- - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix 22000 series SMEM parsing If the firmware were to report three LMACs (which doesn't exist in hardware) then us… New - CVE-2026-43172 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
535 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced plain identification for encoded extents Only plain data whose start position and on-disk physical length a… New - CVE-2026-43166 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
536 7.5 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). syzbot reported null-ptr-deref of udp_sk(sk)->udp_prod_queue. [0] S… New - CVE-2026-43164 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
537 8.8 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block fre… New - CVE-2026-43158 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
538 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buf… New - CVE-2026-43153 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
539 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware configurations So far we've been fairly lax about accepting both unknown CMN models (at… New - CVE-2026-43150 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm
540 8.6 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() xfrm6_get_saddr() does not check the return value of ipv6_dev_get_saddr(). Wh… New - CVE-2026-43139 2026-05-8 22:16 2026-05-6 Show GitHub Exploit DB Packet Storm