Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4761 5.3 警告
Network
pypdf project pypdf pypdf projectのpypdfにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限
CVE-2026-40260 2026-04-24 11:41 2026-04-17 Show GitHub Exploit DB Packet Storm
4762 8.8 重要
Network
Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-269
CWE-863
CVE-2026-40291 2026-04-24 11:41 2026-04-14 Show GitHub Exploit DB Packet Storm
4763 9 緊急
Network
Gitroom Postiz GitroomのPostizにおける複数の脆弱性 CWE-345
CWE-434
CWE-79
CVE-2026-40487 2026-04-24 11:41 2026-04-18 Show GitHub Exploit DB Packet Storm
4764 9.8 緊急
Network
FreeScout FreeScout FreeScoutにおける複数の脆弱性 CWE-200
CWE-284
CWE-770
CVE-2026-40498 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
4765 6.1 警告
Network
FreeScout FreeScout FreeScoutにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-40565 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
4766 7.1 重要
Network
OpenProject OpenProject OpenProjectにおける複数の脆弱性 CWE-367
CWE-639
CVE-2026-40896 2026-04-24 11:41 2026-04-20 Show GitHub Exploit DB Packet Storm
4767 7.1 重要
Network
WWBN AVideo WWBNのAVideoにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-40926 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
4768 9.9 緊急
Network
flowiseai flowise flowiseaiのflowiseにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-40933 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
4769 9.8 緊急
Network
protobufjs project protobufjs protobufjs projectのprotobufjsにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-41242 2026-04-24 11:41 2026-04-18 Show GitHub Exploit DB Packet Storm
4770 7.5 重要
Network
Junrar project Junrar Junrar projectのJunrarにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41245 2026-04-24 11:41 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 - - - In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid per-cpu hold underflow in aa_get_buffer When aa_get_buffer() pulls from the per-cpu list it unconditionally decre… New - CVE-2026-45884 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
472 - - - In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix memleak of newsk in unix_stream_connect(). When prepare_peercred() fails in unix_stream_connect(), unix_release_sock… New - CVE-2026-45887 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
473 - - - In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_run() calls setup_conf() which registers a thread via md_register_thread(). If rai… New - CVE-2026-45888 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
474 - - - In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from userspace and might be unaligned… New - CVE-2026-45893 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
475 - - - In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ … New - CVE-2026-45882 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
476 - - - In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ … New - CVE-2026-45885 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
477 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only arg While making some maps in Cilium read-only from the BPF side, we noticed tha… New - CVE-2026-45886 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
478 - - - In the Linux kernel, the following vulnerability has been resolved: mptcp: do not account for OoO in mptcp_rcvbuf_grow() MPTCP-level OoOs are physiological when multiple subflows are active concurr… New - CVE-2026-45889 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
479 - - - In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after ac… New - CVE-2026-45896 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm
480 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_counter: serialize reset with spinlock Add a global static spinlock to serialize counter fetch+reset operations, p… New - CVE-2026-45897 2026-05-27 23:48 2026-05-27 Show GitHub Exploit DB Packet Storm