Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3271	4.8	警告 Network	pyLoad-ng project	pyLoad-ng	pyLoad-ng projectのpyLoad-ngにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-40594	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3272	8.1	重要 Network	The Kyverno Authors	Kyverno	The Kyverno AuthorsのKyvernoにおける重要な情報のセキュアでない格納に関する脆弱性	CWE-922 重要な情報のセキュアでない格納	CVE-2026-40868	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3273	8.1	重要 Network	goshs	goshs	goshsにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-40883	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3274	9.8	緊急 Network	goshs	goshs	goshsにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40884	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3275	8.8	重要 Network	goshs	goshs	goshsにおける情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2026-40885	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3276	7.5	重要 Network	gomarkdown	markdown	gomarkdownのMarkdownにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40890	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3277	10	緊急 Network	WWBN	AVideo	WWBNのAVideoにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-40911	2026-04-30 12:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3278	5.4	警告 Network	Linux Foundation	tekton pipelines	Linux Foundationのtekton pipelinesにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40923	2026-04-30 12:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

3279	6.5	警告 Network	Linux Foundation	tekton pipelines	Linux Foundationのtekton pipelinesにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40924	2026-04-30 12:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

3280	7.5	重要 Network	Linux Foundation	tekton pipelines	Linux Foundationのtekton pipelinesにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-40938	2026-04-30 12:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1741	6.5	MEDIUM Network	-	-	A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete ser…	-	CVE-2026-28379	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1742	6.5	MEDIUM Network	-	-	Any Editor could delete any snapshot, even if they have no access to read or write them.	CWE-862 Missing Authorization	CVE-2026-28380	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1743	6.5	MEDIUM Network	-	-	A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-me…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28383	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1744	7.4	HIGH Network	-	-	When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128…	CWE-1188 Insecure Default Initialization of Resource	CVE-2026-33376	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1745	7.1	HIGH Network	-	-	An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.	-	CVE-2026-33377	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1746	6.5	MEDIUM Network	-	-	Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-33378	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1747	6.3	MEDIUM Network	-	-	A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vul…	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-33380	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1748	5.9	MEDIUM Network	-	-	When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.	CWE-284 Improper Access Control	CVE-2026-33381	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1749	9.8	CRITICAL Network	-	-	Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Blind SQL Injection. Th…	CWE-89 SQL Injection	CVE-2025-11024	2026-05-15 01:20	2026-05-14	Show	GitHub Exploit DB Packet Storm

1750	9.8	CRITICAL Network	-	-	Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website: b…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-2347	2026-05-15 01:20	2026-05-14	Show	GitHub Exploit DB Packet Storm