Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191871 7.8 重要
Local
Linux
日本電気
Debian
Canonical
レッドハット
- Linux カーネルのメモリサブシステムに実装されている copy-on-write 機構に競合状態が発生する脆弱性 CWE-362
競合状態
CVE-2016-5195 2017-07-25 13:45 2016-10-21 Show GitHub Exploit DB Packet Storm
191872 8.1 重要
Network
GNU Project
VMware
日本電気
オラクル
- glibc にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-7547 2017-07-25 13:45 2016-02-17 Show GitHub Exploit DB Packet Storm
191873 7.5 重要
Network
Sierra Wireless - Sierra Wireless AirLink Raven XE および XT における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-6046 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
191874 9.8 緊急
Network
Sierra Wireless - Sierra Wireless AirLink Raven XE および XT における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2017-6044 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
191875 8.8 重要
Network
Sierra Wireless - Sierra Wireless AirLink Raven XE および XT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-6042 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
191876 9.8 緊急
Network
Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix 1100 および 1400 コントローラにおける暗号強度に関する脆弱性 CWE-326
不適切な暗号強度
CVE-2017-7903 2017-07-25 13:33 2017-05-23 Show GitHub Exploit DB Packet Storm
191877 9.8 緊急
Network
Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix 1100 および 1400 コントローラにおける暗号に関する脆弱性 CWE-310
暗号の問題
CVE-2017-7902 2017-07-25 13:33 2017-05-23 Show GitHub Exploit DB Packet Storm
191878 9.8 緊急
Network
Xoev - OSCI Transport Library で使用される OSCI-Transport における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-10670 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
191879 6.5 警告
Network
Xoev - OSCI Transport Library で使用される OSCI-Transport における署名ラッピング攻撃を実行される脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2017-10669 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
191880 5.9 警告
Network
Xoev - OSCI Transport Library で使用される OSCI-Transport におけるパディングオラクル攻撃を実行される脆弱性 CWE-200
情報漏えい
CVE-2017-10668 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1571 6.1 MEDIUM
Local
- - Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Unix-like systems, al… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-45222 2026-05-14 00:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1572 8.1 HIGH
Network
- - MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing Authent… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44400 2026-05-14 00:30 2026-05-9 Show GitHub Exploit DB Packet Storm
1573 8.1 HIGH
Network
- - SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json fi… CWE-22
Path Traversal
CVE-2026-7807 2026-05-14 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
1574 8.8 HIGH
Network
- - CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager con… CWE-59
Link Following
CVE-2021-47949 2026-05-14 00:29 2026-05-10 Show GitHub Exploit DB Packet Storm
1575 6.1 MEDIUM
Network
- - Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the file parameter. Atta… CWE-79
Cross-site Scripting
CVE-2022-50957 2026-05-14 00:29 2026-05-10 Show GitHub Exploit DB Packet Storm
1576 6.1 MEDIUM
Network
- - Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can injec… CWE-79
Cross-site Scripting
CVE-2022-50943 2026-05-14 00:27 2026-05-10 Show GitHub Exploit DB Packet Storm
1577 8.8 HIGH
Network
- - SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploi… CWE-94
Code Injection
CVE-2026-8429 2026-05-14 00:26 2026-05-13 Show GitHub Exploit DB Packet Storm
1578 8.1 HIGH
Network
- - SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute arbitrary code in the co… CWE-94
Code Injection
CVE-2026-8430 2026-05-14 00:26 2026-05-13 Show GitHub Exploit DB Packet Storm
1579 7.1 HIGH
Network
- - Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing victim workflow UUIDs without pro… CWE-863
 Incorrect Authorization
CVE-2026-45226 2026-05-14 00:26 2026-05-13 Show GitHub Exploit DB Packet Storm
1580 6.5 MEDIUM
Network
- - The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3. This is due to the software allowing users … CWE-94
Code Injection
CVE-2025-15463 2026-05-14 00:26 2026-05-13 Show GitHub Exploit DB Packet Storm