Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3471	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2023-53668	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3472	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53669	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3473	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53670	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3474	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-53671	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3475	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-53672	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3476	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2023-53673	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3477	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53674	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3478	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2023-53675	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3479	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2023-53676	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3480	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53677	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
401	9.1	CRITICAL Network	openexr	openexr	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… Update	CWE-125 Out-of-bounds Read	CVE-2026-42216	2026-05-9 01:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

402	7.8	HIGH Local	libreoffice	libreoffice	Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2… Update	CWE-787 Out-of-bounds Write	CVE-2026-4430	2026-05-9 01:48	2026-05-7	Show	GitHub Exploit DB Packet Storm

403	-		-	-	ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated remote attacker to pe… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-44499	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

404	-		-	-	Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… New	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-43967	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

405	7.5	HIGH Network	-	-	A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module pr… New	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-42501	2026-05-9 01:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

406	8.2	HIGH Network	-	-	i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware passes the user-controlled ln… New	CWE-22 CWE-918 Path Traversal Server-Side Request Forgery (SSRF)	CVE-2026-42353	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

407	7.5	HIGH Network	-	-	locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to regist… New	CWE-79 CWE-346 Cross-site Scripting Origin Validation Error	CVE-2026-41886	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

408	6.5	MEDIUM Network	-	-	i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend interpolates lng, ns, proje… New	CWE-22 CWE-74 Path Traversal Injection	CVE-2026-41885	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

409	8.1	HIGH Network	-	-	OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applica… New	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-41883	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

410	8.2	HIGH Network	-	-	i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options… New	CWE-22 CWE-73 Path Traversal External Control of File Name or Path	CVE-2026-41693	2026-05-9 01:16	2026-05-9	Show	GitHub Exploit DB Packet Storm