Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191811 7.8 重要
Local 		lrzip project - lrzip の liblrzip.so の stream.c の read_1g 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8844 2017-06-6 16:54 2017-03-25 Show GitHub Exploit DB Packet Storm
191812 5.5 警告
Local 		lrzip project - lrzip の liblrzip.so の stream.c の join_pthread 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-8843 2017-06-6 16:54 2017-03-25 Show GitHub Exploit DB Packet Storm
191813 5.5 警告
Local 		lrzip project - lrzip の liblrzip.so の libzpaq/libzpaq.h の bufRead::get() 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算 		CVE-2017-8842 2017-06-6 16:54 2017-03-25 Show GitHub Exploit DB Packet Storm
191814 6.5 警告
Network 		SWFTools - SWFTools における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-8401 2017-06-6 16:53 2017-04-27 Show GitHub Exploit DB Packet Storm
191815 8.8 重要
Network 		SWFTools - SWFTools における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-8400 2017-06-6 16:53 2017-04-26 Show GitHub Exploit DB Packet Storm
191816 6.8 警告
Physics 		Dolibarr ERP & CRM - Dolibarr ERP/CRM におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-8879 2017-06-6 16:36 2017-02-23 Show GitHub Exploit DB Packet Storm
191817 9.8 緊急
Network 		Dolibarr ERP & CRM - Dolibarr ERP/CRM における暗号強度に関する脆弱性 CWE-326
不適切な暗号強度 		CVE-2017-7888 2017-06-6 16:36 2017-02-23 Show GitHub Exploit DB Packet Storm
191818 6.1 警告
Network 		Dolibarr ERP & CRM - Dolibarr ERP/CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-7887 2017-06-6 16:36 2017-02-23 Show GitHub Exploit DB Packet Storm
191819 9.8 緊急
Network 		Dolibarr ERP & CRM - Dolibarr ERP/CRM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-7886 2017-06-6 16:36 2017-02-23 Show GitHub Exploit DB Packet Storm
191820 5.3 警告
Network 		F5 Networks - F5 BIG-IP APM における範囲エラーに関する脆弱性 CWE-118
インデックス化が可能なリソースの不適切なアクセス (範囲エラー) 		CVE-2017-0302 2017-06-6 16:34 2017-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 4.4 MEDIUM
Local 		oracle linux An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via… Update CWE-125
Out-of-bounds Read 		CVE-2026-35233 2026-05-6 02:46 2026-05-2 Show GitHub Exploit DB Packet Storm
12 5.5 MEDIUM
Local 		oracle linux An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab() Update CWE-369
 Divide By Zero 		CVE-2026-21996 2026-05-6 02:45 2026-05-2 Show GitHub Exploit DB Packet Storm
13 7.3 HIGH
Network 		gnu glibc The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write w… Update CWE-787
 Out-of-bounds Write 		CVE-2026-5435 2026-05-6 02:38 2026-04-28 Show GitHub Exploit DB Packet Storm
14 7.8 HIGH
Local 		kde kcoreaddons In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading … Update CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-41526 2026-05-6 02:25 2026-04-28 Show GitHub Exploit DB Packet Storm
15 2.6 LOW
Adjacent 		- - A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api_server/openai_rout… New CWE-310
CWE-330
Cryptographic Issues
 Use of Insufficiently Random Values 		CVE-2026-7847 2026-05-6 02:17 2026-05-6 Show GitHub Exploit DB Packet Storm
16 - - - ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject malicious JavaScript co… New - CVE-2026-38432 2026-05-6 02:17 2026-05-6 Show GitHub Exploit DB Packet Storm
17 - - - ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions that are executed on… New - CVE-2026-38431 2026-05-6 02:17 2026-05-6 Show GitHub Exploit DB Packet Storm
18 - - - OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml. New - CVE-2026-38429 2026-05-6 02:17 2026-05-6 Show GitHub Exploit DB Packet Storm
19 5.9 MEDIUM
Network 		- - A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with a… New CWE-120
Classic Buffer Overflow 		CVE-2026-34956 2026-05-6 02:17 2026-05-6 Show GitHub Exploit DB Packet Storm
20 7.3 HIGH
Network 		- - Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users a… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-29168 2026-05-6 02:17 2026-05-5 Show GitHub Exploit DB Packet Storm