Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191001 9.8 緊急
Network
Teltonika - Teltonika RUT9XX ルータのファームウェアの管理インターフェースにおける root 権限で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8116 2017-08-17 16:22 2017-06-20 Show GitHub Exploit DB Packet Storm
191002 9.8 緊急
Network
ATutor - ATutor における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1000003 2017-08-17 16:01 2017-07-16 Show GitHub Exploit DB Packet Storm
191003 9.8 緊急
Network
ATutor - ATutor におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-1000002 2017-08-17 16:01 2017-07-16 Show GitHub Exploit DB Packet Storm
191004 6.1 警告
Network
ビー・ブラウンエースクラップ株式会社 - B. Braun Medical SpaceCom モジュールにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2017-6018 2017-08-17 15:05 2017-05-23 Show GitHub Exploit DB Packet Storm
191005 8.1 重要
Network
The Foreman - Foreman におけるユーザの認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5152 2017-08-17 12:28 2015-07-15 Show GitHub Exploit DB Packet Storm
191006 8.8 重要
Network
アドビシステムズ - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-704
不正な型変換またはキャスト
CVE-2017-3106 2017-08-17 11:58 2017-08-8 Show GitHub Exploit DB Packet Storm
191007 7.5 重要
Network
アドビシステムズ - Adobe Flash Player におけるセキュリティを回避される脆弱性 CWE-200
情報漏えい
CVE-2017-3085 2017-08-17 11:58 2017-08-8 Show GitHub Exploit DB Packet Storm
191008 8.8 重要
Network
マイクロソフト - Windows Server 2008 および Windows 7 におけるリモートでコードを実行される脆弱性 CWE-19
データ処理
CVE-2017-8691 2017-08-17 11:55 2017-08-8 Show GitHub Exploit DB Packet Storm
191009 7.5 重要
Network
マイクロソフト - 複数の Microsoft Windows 製品の Windows Error Reporting における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-8633 2017-08-17 11:55 2017-08-8 Show GitHub Exploit DB Packet Storm
191010 7.8 重要
Local
マイクロソフト - Microsoft Windows 10 の Windows Subsystem for Linux における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-8622 2017-08-17 11:55 2017-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 8.6 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to serve… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44578 2026-05-15 03:34 2026-05-14 Show GitHub Exploit DB Packet Storm
32 7.5 HIGH
Network
argoproj argo_workflows Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, the Webhook Interceptor loads the entire request b… Update CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-42294 2026-05-15 03:34 2026-05-9 Show GitHub Exploit DB Packet Storm
33 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerab… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44579 2026-05-15 03:34 2026-05-14 Show GitHub Exploit DB Packet Storm
34 6.1 MEDIUM
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be… New CWE-79
Cross-site Scripting
CVE-2026-44580 2026-05-15 03:33 2026-05-14 Show GitHub Exploit DB Packet Storm
35 7.5 HIGH
Network
- - Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation. New CWE-253
 Incorrect Check of Function Return Value
CVE-2026-46419 2026-05-15 03:31 2026-05-14 Show GitHub Exploit DB Packet Storm
36 - - - Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL (via the web interface or the API). In affected versi… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44515 2026-05-15 03:31 2026-05-15 Show GitHub Exploit DB Packet Storm
37 6.5 MEDIUM
Network
- - Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A… New CWE-1385
 Missing Origin Validation in WebSockets
CVE-2026-44514 2026-05-15 03:31 2026-05-15 Show GitHub Exploit DB Packet Storm
38 8.6 HIGH
Network
- - Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints. New CWE-250
 Execution with Unnecessary Privileges
CVE-2026-29205 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm
39 8.2 HIGH
Network
- - SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials. New CWE-295
Improper Certificate Validation 
CVE-2026-32992 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm
40 4.3 MEDIUM
Network
- - In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL. New CWE-696
 Incorrect Behavior Order
CVE-2026-44919 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm