Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191591 9.8 緊急
Network 		IBM - IBM Domino における複数のセッションを使用する資格情報を盗まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6087 2017-07-3 11:40 2016-06-29 Show GitHub Exploit DB Packet Storm
191592 7.5 重要
Network 		ジュニパーネットワークス - 複数の Juniper Networks デバイス上で稼動する Junos OS における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-2304 2017-07-3 10:47 2017-01-11 Show GitHub Exploit DB Packet Storm
191593 7.5 重要
Network 		ジュニパーネットワークス - Juniper Networks 製品およびプラットフォーム上で稼動する Junos OS におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-2303 2017-07-3 10:47 2017-01-11 Show GitHub Exploit DB Packet Storm
191594 7.5 重要
Network 		ジュニパーネットワークス - Juniper Networks 製品およびプラットフォーム上で稼動する Junos OS におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-2302 2017-07-3 10:46 2017-01-11 Show GitHub Exploit DB Packet Storm
191595 7.5 重要
Network 		ジュニパーネットワークス - Juniper Networks 製品およびプラットフォーム上で稼動する Junos OS におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-2301 2017-07-3 10:46 2017-01-11 Show GitHub Exploit DB Packet Storm
191596 7.5 重要
Network 		The Chicken Team - Spiffy におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-8235 2017-06-30 18:00 2015-11-11 Show GitHub Exploit DB Packet Storm
191597 4.3 警告
Network 		IBM - IBM Security Access Manager for Web におけるサーバの特権機能にアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3051 2017-06-30 17:54 2016-03-9 Show GitHub Exploit DB Packet Storm
191598 6.5 警告
Network 		IBM - IBM Security Access Manager for Web における機密性の高い情報を解読される脆弱性 CWE-326
不適切な暗号強度 		CVE-2016-3019 2017-06-30 17:54 2016-03-9 Show GitHub Exploit DB Packet Storm
191599 7.5 重要
Network 		Bitcoin Project - Bitcoin のプルーフ・オブ・ワークのアルゴリズムにおける暗号の脆弱な PRNG の使用に関する脆弱性 CWE-338
暗号における脆弱な PRNG の使用 		CVE-2017-9230 2017-06-30 17:48 2017-04-5 Show GitHub Exploit DB Packet Storm
191600 9.8 緊急
Network 		gRPC - Google gRPC における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-9431 2017-06-30 17:38 2017-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 8.6 HIGH
Network 		- - Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows un… New CWE-200
CWE-497
Information Exposure
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-42047 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
112 9.6 CRITICAL
Network 		- - Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo… New CWE-200
CWE-212
Information Exposure
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-42880 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
113 7.3 HIGH
Network 		- - This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Due to t… New CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2026-6411 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
114 8.8 HIGH
Network 		- - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution envir… New CWE-78
CWE-94
CWE-250
CWE-284
CWE-693
OS Command 
Code Injection
 Execution with Unnecessary Privileges
Improper Access Control
 Protection Mechanism Failure 		CVE-2026-41900 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
115 5.1 MEDIUM
Network 		- - wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting… New CWE-79
Cross-site Scripting 		CVE-2026-42150 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
116 7.1 HIGH
Network 		- - PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to before version 0.5.4, apps/web/src/routes/skills.ts exposes an authenticated endpoint POST /api/sk… New CWE-20
CWE-693
CWE-918
 Improper Input Validation 
 Protection Mechanism Failure
Server-Side Request Forgery (SSRF)  		CVE-2026-42261 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
117 8.7 HIGH
Network 		- - zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization b… New CWE-22
CWE-61
Path Traversal
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-42275 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
118 6.1 MEDIUM
Network 		- - In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability can be exploited by unauthenticated remote attackers to target users of the mo… New CWE-79
Cross-site Scripting 		CVE-2022-23961 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
119 - - - UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline… New CWE-284
CWE-639
Improper Access Control
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42278 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
120 - - - yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET). New - CVE-2024-46508 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm