Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191641 5.5 警告
Local 		LAME project - LAME などの libmpgdecoder.a で使用される mpglib の layer3.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-9870 2017-07-11 17:15 2017-06-17 Show GitHub Exploit DB Packet Storm
191642 5.5 警告
Local 		LAME project - LAME などの製品の libmpgdecoder.a で使用される mpglib の layer2.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-9869 2017-07-11 17:15 2017-06-17 Show GitHub Exploit DB Packet Storm
191643 5.5 警告
Local 		LAME project - LAME の libmp3lame.a の util.c の fill_buffer_resample 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-9101 2017-07-11 17:15 2015-02-5 Show GitHub Exploit DB Packet Storm
191644 5.5 警告
Local 		LAME project - LAME の libmp3lame.a の util.c の fill_buffer_resample 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2015-9100 2017-07-11 17:15 2015-02-5 Show GitHub Exploit DB Packet Storm
191645 5.5 警告
Local 		LAME project - LAME の libmp3lame.a の lame.c の lame_init_params 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2015-9099 2017-07-11 17:15 2015-01-21 Show GitHub Exploit DB Packet Storm
191646 5.4 警告
Network 		IBM - IBM RELM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9747 2017-07-11 16:58 2016-12-1 Show GitHub Exploit DB Packet Storm
191647 7.8 重要
Local 		Linux - AMD64 システム上で稼動する Linux Kernel における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1000379 2017-07-11 16:35 2017-06-19 Show GitHub Exploit DB Packet Storm
191648 7.8 重要
Local 		Linux - Linux Kernel で使用される offset2lib パッチにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1000371 2017-07-11 16:35 2017-06-19 Show GitHub Exploit DB Packet Storm
191649 7.8 重要
Local 		Linux - Linux Kernel で使用される offset2lib パッチにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1000370 2017-07-11 16:35 2017-06-19 Show GitHub Exploit DB Packet Storm
191650 7.8 重要
Local 		Linux - Linux Kernel における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1000365 2017-07-11 16:35 2017-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 6.5 MEDIUM
Network 		- - Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by provi… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42277 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
802 5.8 MEDIUM
Network 		- - solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization w… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42279 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
803 7.5 HIGH
Network 		- - Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP port 445. CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-27686 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
804 6.3 MEDIUM
Network 		- - /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter. CWE-77
Command Injection 		CVE-2024-30167 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
805 9.1 CRITICAL
Network 		- - LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's in… CWE-78
OS Command  		CVE-2024-51092 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
806 - - - 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess fil… - CVE-2025-67887 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
807 7.3 HIGH
Network 		- - An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php (when the "api" parameter is set) is not properly sanitized bef… CWE-78
OS Command  		CVE-2025-67888 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
808 - - - RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to c… - CVE-2025-69599 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
809 - - - Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property. NOTE: the Supplier disputes … - CVE-2025-69690 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
810 - - - Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally all… - CVE-2025-69691 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm