Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191911 6.2 警告
Local
レッドハット - 複数の Red Hat Enterprise Linux 製品にパッケージされた Network Manager における重要な接続情報を取得される脆弱性 CWE-362
競合状態
CVE-2016-0764 2017-08-9 15:36 2016-11-3 Show GitHub Exploit DB Packet Storm
191912 5.5 警告
Local
Linux - Linux Kernel の net/ipv6/output_core.c の ip6_find_1stfragopt 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-7542 2017-08-9 15:25 2017-07-19 Show GitHub Exploit DB Packet Storm
191913 6.1 警告
Network
Yii Framework - Yii Framework の framework/views/errorHandler/exception.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-11516 2017-08-9 15:16 2017-07-21 Show GitHub Exploit DB Packet Storm
191914 5.4 警告
Network
ownCloud - ownCloud Server の検索モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-9338 2017-08-9 15:11 2017-05-31 Show GitHub Exploit DB Packet Storm
191915 6.1 警告
Network
ownCloud - ownCloud Server のエラーページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-8896 2017-08-9 15:11 2017-05-31 Show GitHub Exploit DB Packet Storm
191916 6.1 警告
Network
Koozali Foundation - Koozali Foundation SME Server におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2017-1000027 2017-08-9 15:02 2017-02-2 Show GitHub Exploit DB Packet Storm
191917 7.5 重要
Network
Chef Software, Inc. - Chef Software の mixlib-archive におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-1000026 2017-08-9 15:02 2017-02-2 Show GitHub Exploit DB Packet Storm
191918 6.1 警告
Network
phpMiniAdmin project - PHPMiniAdmin における格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1000005 2017-08-9 15:02 2017-07-17 Show GitHub Exploit DB Packet Storm
191919 9.8 緊急
Network
オラクル - Oracle GlassFish Server における Java キーストアのパスワードを公開される脆弱性 CWE-287
不適切な認証
CVE-2017-1000030 2017-08-9 14:10 2017-07-17 Show GitHub Exploit DB Packet Storm
191920 7.5 重要
Network
オラクル - Oracle GlassFish Server におけるローカルファイルインクルージョンの脆弱性 CWE-200
情報漏えい
CVE-2017-1000029 2017-08-9 14:10 2017-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1871 8.4 HIGH
Network
- - A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher throu… CWE-35
 Path Traversal: '.../...//'
CVE-2026-25705 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1872 9.9 CRITICAL
Network
- - Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on … CWE-863
 Incorrect Authorization
CVE-2026-41050 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1873 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… CWE-250
 Execution with Unnecessary Privileges
CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1874 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1875 8.8 HIGH
Adjacent
- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… CWE-79
Cross-site Scripting
CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1876 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… CWE-78
OS Command 
CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1877 7.2 HIGH
Network
- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… CWE-78
OS Command 
CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1878 5.3 MEDIUM
Network
- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… CWE-776
XML Entity Expansion
CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1879 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke… CWE-77
Command Injection
CVE-2026-23823 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1880 9.1 CRITICAL
Network
- - Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data… - CVE-2025-11159 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm