Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191311 8.8 重要
Network
Elasticsearch - Kibana Reporting プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1000218 2017-07-21 15:52 2016-09-6 Show GitHub Exploit DB Packet Storm
191312 6.1 警告
Network
Elasticsearch - X-Pack がインストールされた Kibana のログインページにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2017-8451 2017-07-21 15:45 2017-04-20 Show GitHub Exploit DB Packet Storm
191313 7.5 重要
Network
Elasticsearch - X-Pack における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-8450 2017-07-21 15:40 2017-01-23 Show GitHub Exploit DB Packet Storm
191314 5.9 警告
Network
Elasticsearch - X-Pack における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-8449 2017-07-21 15:40 2017-03-28 Show GitHub Exploit DB Packet Storm
191315 5.9 警告
Local
Linux - PAX Linux Kernel におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-1000377 2017-07-21 15:33 2017-06-19 Show GitHub Exploit DB Packet Storm
191316 7 重要
Local
レッドハット - libffi におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-1000376 2017-07-21 15:33 2017-06-19 Show GitHub Exploit DB Packet Storm
191317 6.5 警告
Network
OpenBSD - OpenBSD におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2017-1000373 2017-07-21 15:33 2017-05-17 Show GitHub Exploit DB Packet Storm
191318 4 警告
Local
Exim Development - Exim における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1000369 2017-07-21 15:33 2017-06-19 Show GitHub Exploit DB Packet Storm
191319 7.8 重要
Local
OpenStack
GNU Project
openSUSE project
SUSE
レッドハット
- glibc におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-1000366 2017-07-21 15:33 2017-06-16 Show GitHub Exploit DB Packet Storm
191320 7.5 重要
Network
radare - radare2 の shlr/grub/fs/ext2.c で使用される GNU GRUB の fs/ext2.c の grub_ext2_read_block 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-9763 2017-07-21 11:29 2017-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable l… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-20753 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
322 - - - Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary wi… New CWE-125
Out-of-bounds Read
CVE-2026-20751 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
323 - - - Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adve… New CWE-822
 Untrusted Pointer Dereference
CVE-2026-20738 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
324 - - - Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… New CWE-276
Incorrect Default Permissions 
CVE-2026-20718 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
325 - - - Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with a… New CWE-20
 Improper Input Validation 
CVE-2026-20717 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
326 - - - An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page. New - CVE-2025-65719 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
327 - - - Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an auth… New CWE-427
 Uncontrolled Search Path Element
CVE-2025-36515 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
328 - - - Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2025-36510 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
329 - - - Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with … New CWE-665
 Improper Initialization
CVE-2025-35991 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm
330 - - - Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… New CWE-20
 Improper Input Validation 
CVE-2025-35990 2026-05-13 02:16 2026-05-13 Show GitHub Exploit DB Packet Storm