Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190981 8.8 重要
Network
IBM - IBM MQ アプライアンスにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2017-1318 2017-08-18 11:28 2017-07-14 Show GitHub Exploit DB Packet Storm
190982 7.5 重要
Network
LibSass - LibSass の parser.cpp の Parser::advanceToNextToken 関数におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題
CVE-2017-11556 2017-08-18 11:05 2017-07-17 Show GitHub Exploit DB Packet Storm
190983 7.5 重要
Network
LibSass - LibSass の eval.cpp の Eval::operator 関数における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-11555 2017-08-18 11:05 2017-07-17 Show GitHub Exploit DB Packet Storm
190984 7.5 重要
Network
LibSass - LibSass の sassc で使用される parser.hpp の lex 関数におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題
CVE-2017-11554 2017-08-18 11:05 2017-07-17 Show GitHub Exploit DB Packet Storm
190985 6.1 警告
Network
Episerver - Ektron Content Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6133 2017-08-18 09:51 2016-07-29 Show GitHub Exploit DB Packet Storm
190986 7.2 重要
Network
Apache Software Foundation - Apache Roller の weblog ページテンプレートにおける任意の java コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-0249 2017-08-17 18:30 2015-03-24 Show GitHub Exploit DB Packet Storm
190987 7.5 重要
Network
ジュニパーネットワークス - Juniper Networks vSRX または SRX シリーズのデバイス上で稼動する Junos OS における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-10605 2017-08-17 18:08 2017-07-12 Show GitHub Exploit DB Packet Storm
190988 7.5 重要
Network
Igor Sysoev - Nginx の range filter モジュールにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-7529 2017-08-17 18:04 2017-07-11 Show GitHub Exploit DB Packet Storm
190989 6.1 警告
Network
シスコシステムズ - Cisco Prime Collaboration Provisioning Tool の Web ポータルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-6755 2017-08-17 17:57 2017-07-19 Show GitHub Exploit DB Packet Storm
190990 7.8 重要
Local
MODPlug Central - OpenMPT および libopenmpt におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-11311 2017-08-17 17:48 2017-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 7.8 HIGH
Local
- - Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers … New CWE-428
 Unquoted Search Path or Element
CVE-2020-37247 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
22 6.2 MEDIUM
Local
- - Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers ca… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2020-37246 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
23 7.5 HIGH
Network
- - Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by injecting directory traversal sequ… New CWE-79
Cross-site Scripting
CVE-2020-37245 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
24 8.2 HIGH
Network
- - Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' p… New CWE-89
SQL Injection
CVE-2020-37244 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
25 8.2 HIGH
Network
- - Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl acti… New CWE-89
SQL Injection
CVE-2020-37243 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
26 8.2 HIGH
Network
- - Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parame… New CWE-89
SQL Injection
CVE-2020-37242 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
27 5.3 MEDIUM
Network
- - bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious pages. Attackers can… New CWE-352
 Origin Validation Error
CVE-2020-37241 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
28 6.4 MEDIUM
Network
- - Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user creation fields. Attackers can ins… New CWE-79
Cross-site Scripting
CVE-2020-37240 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
29 9.8 CRITICAL
Network
- - libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_… New CWE-415
 Double Free
CVE-2020-37239 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
30 6.4 MEDIUM
Network
- - CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scripts through SVG file uploads. Attackers… New CWE-79
Cross-site Scripting
CVE-2020-37238 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm