Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190361 7.8 重要
Local 		ledger project - Ledger-CLI における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-2808 2017-09-27 17:28 2017-08-30 Show GitHub Exploit DB Packet Storm
190362 7.8 重要
Local 		ledger project - Ledger-CLI におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-2807 2017-09-27 17:28 2017-08-30 Show GitHub Exploit DB Packet Storm
190363 7.5 重要
Network 		@ScrapyProject - Scrapy におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2017-14158 2017-09-27 17:28 2017-02-8 Show GitHub Exploit DB Packet Storm
190364 6.5 警告
Network 		Fabrice Bellard - Qemu における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-13673 2017-09-27 17:22 2017-05-11 Show GitHub Exploit DB Packet Storm
190365 7.5 重要
Network 		GNU Project
Debian		 - Libgcrypt における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-0379 2017-09-27 17:22 2017-08-27 Show GitHub Exploit DB Packet Storm
190366 7.2 重要
Network 		OpenCart - OpenCart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-10509 2017-09-27 17:22 2016-03-14 Show GitHub Exploit DB Packet Storm
190367 6.1 警告
Network 		SiliSoftware - phpThumb() におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-10508 2017-09-27 17:22 2016-04-12 Show GitHub Exploit DB Packet Storm
190368 7 重要
Local 		Automated Logic Corporation - 複数の ALC 製品における引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2017-9644 2017-09-27 17:16 2017-08-22 Show GitHub Exploit DB Packet Storm
190369 6.3 警告
Network 		Automated Logic Corporation - 複数の ALC 製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-9640 2017-09-27 17:16 2017-08-22 Show GitHub Exploit DB Packet Storm
190370 8.8 重要
Network 		ManageEngine - ServiceDesk Plus などの製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-5302 2017-09-27 17:16 2014-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 8.7 HIGH
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in assessment file preview f… New CWE-79
Cross-site Scripting 		CVE-2026-44669 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
92 9.8 CRITICAL
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invo… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-44668 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
93 8.7 HIGH
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in remediation verification … New CWE-79
Cross-site Scripting 		CVE-2026-44667 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
94 - - - Traccar is an open source GPS tracking system. Prior to 6.13.0, DeviceResource.uploadImage authorizes the target device only through Condition.Permission(User.class, getUserId(), Device.class) and th… New CWE-863
 Incorrect Authorization 		CVE-2026-44314 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
95 6.5 MEDIUM
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the application, allowing an unauthorized authenticated user to edit comments posted by othe… New CWE-284
CWE-639
Improper Access Control
 Authorization Bypass Through User-Controlled Key 		CVE-2026-43934 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
96 3.5 LOW
Network 		- - Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.24.0, there is a path traversal when a receiver who specifies "--output <dir>" w… New CWE-22
Path Traversal 		CVE-2026-42448 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
97 6.5 MEDIUM
Network 		- - libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. At… New CWE-416
 Use After Free 		CVE-2026-41401 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
98 4.4 MEDIUM
Network 		- - nuts-node is the reference implementation of the Nuts specification. Prior to 6.2.3 and 5.4.31, the v1 access token introspection endpoint (/auth/v1/introspect_access_token) accepts any JWT signed by… New CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-41164 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
99 5.8 MEDIUM
Local 		- - NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering… New CWE-787
 Out-of-bounds Write 		CVE-2026-24201 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
100 7.0 HIGH
Local 		- - NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to den… New CWE-416
 Use After Free 		CVE-2026-24200 2026-05-27 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm