Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191701 8.1 重要
Network
マイクロソフト - Microsoft Edge におけるリモートでコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-0152 2017-08-8 18:10 2017-03-9 Show GitHub Exploit DB Packet Storm
191702 6.5 警告
Network
SAP - SAP NetWeaver の disp+work におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇
CVE-2017-9845 2017-08-8 17:07 2017-03-14 Show GitHub Exploit DB Packet Storm
191703 9.8 緊急
Network
SAP - SAP NetWeaver におけるサービス運用妨害 (DoS) の脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2017-9844 2017-08-8 17:07 2017-03-14 Show GitHub Exploit DB Packet Storm
191704 8.8 重要
Network
MODX - MODX Revolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-1000067 2017-08-8 16:55 2017-04-5 Show GitHub Exploit DB Packet Storm
191705 5.4 警告
Network
IBM - IBM Emptoris Sourcing におけるフィッシング攻撃を実行される脆弱性 CWE-601
オープンリダイレクト
CVE-2016-8953 2017-08-8 16:51 2016-10-25 Show GitHub Exploit DB Packet Storm
191706 5.4 警告
Network
IBM - IBM Emptoris Sourcing におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8948 2017-08-8 16:51 2016-10-25 Show GitHub Exploit DB Packet Storm
191707 6.1 警告
Network
OpenMediaVault - OpenMediaVault の rpc.php の Access Rights Management(Users) 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1000065 2017-08-8 16:48 2017-03-17 Show GitHub Exploit DB Packet Storm
191708 9.8 緊急
Network
The PHP Group - PHP の ext/intl/msgformat/msgformat_parse.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-11362 2017-08-8 16:47 2017-06-2 Show GitHub Exploit DB Packet Storm
191709 7.5 重要
Adjacent
IBM - IBM Tivoli Monitoring Portal における Portal Server の SQL コマンドを変更される脆弱性 CWE-89
SQLインジェクション
CVE-2017-1183 2017-08-8 16:40 2017-07-10 Show GitHub Exploit DB Packet Storm
191710 7.5 重要
Adjacent
IBM - IBM Tivoli Monitoring Portal におけるシステム上で任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2017-1182 2017-08-8 16:40 2017-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1461 10.0 CRITICAL
Network
- - Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows a… CWE-94
Code Injection
CVE-2026-42298 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1462 6.5 MEDIUM
Network
- - Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check-Time-of-Use) vulner… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42346 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1463 8.9 HIGH
Network
- - Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their ow… CWE-79
Cross-site Scripting
CVE-2026-42556 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1464 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… CWE-79
Cross-site Scripting
CVE-2026-42794 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm
1465 - - - Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-42793 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm
1466 - - - Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-43967 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm
1467 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event/1 in cowlib guards… CWE-93
CRLF Injection
CVE-2026-43968 2026-05-14 00:57 2026-05-12 Show GitHub Exploit DB Packet Storm
1468 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cow_co… CWE-93
CRLF Injection
CVE-2026-43969 2026-05-14 00:57 2026-05-12 Show GitHub Exploit DB Packet Storm
1469 - - - Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-7790 2026-05-14 00:57 2026-05-12 Show GitHub Exploit DB Packet Storm
1470 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel … CWE-89
SQL Injection
CVE-2026-32687 2026-05-14 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm