Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191931 7.5 重要
Network
radare - radare2 の shlr/grub/fs/ext2.c で使用される GNU GRUB の fs/ext2.c の grub_ext2_read_block 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-9763 2017-07-21 11:29 2017-06-12 Show GitHub Exploit DB Packet Storm
191932 9.8 緊急
Network
INRIA - OCaml コンパイラにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-9772 2017-07-21 10:45 2017-06-23 Show GitHub Exploit DB Packet Storm
191933 7.5 重要
Network
FreeIPA project - FreeIPA におけるサービスに対して任意の SAN 名をリクエストされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5414 2017-07-20 18:09 2016-07-26 Show GitHub Exploit DB Packet Storm
191934 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - EMC Avamar Server ソフトウェアにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2017-4990 2017-07-20 18:05 2017-06-20 Show GitHub Exploit DB Packet Storm
191935 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - EMC Avamar Server ソフトウェアにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2017-4989 2017-07-20 18:05 2017-06-20 Show GitHub Exploit DB Packet Storm
191936 7.5 重要
Network
Elasticsearch - Logstash における Logstash Forwarder エージェントと Logstash サーバ間の通信を読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-5378 2017-07-20 18:02 2015-06-30 Show GitHub Exploit DB Packet Storm
191937 5.5 警告
Local
Google - Android の AndroidManifest.XML の MessageStatusReceiver サービスにおける SMS および MMS メッセージの送受信ステータスを変更される脆弱性 CWE-284
不適切なアクセス制御
CVE-2015-3840 2017-07-20 18:02 2015-08-11 Show GitHub Exploit DB Packet Storm
191938 9.8 緊急
Network
OpenDaylight Project - Opendaylight における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2015-1778 2017-07-20 18:02 2015-02-17 Show GitHub Exploit DB Packet Storm
191939 7.8 重要
Local
Kamailio - kamailio の kamailio ビルドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-1591 2017-07-20 18:02 2015-05-22 Show GitHub Exploit DB Packet Storm
191940 7.8 重要
Local
レッドハット - Red Hat Storage Console および Storage Console Node の rhscon-ceph におけるパスワードを平文で取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-7062 2017-07-20 17:59 2016-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1451 8.8 HIGH
Network
anthropic claude_code In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious reposi… Update CWE-20
CWE-77
NVD-CWE-noinfo
 Improper Input Validation 
Command Injection
CVE-2026-40068 2026-05-13 01:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1452 6.5 MEDIUM
Network
langgenius dify Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplyin… Update CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41950 2026-05-13 01:20 2026-05-6 Show GitHub Exploit DB Packet Storm
1453 7.5 HIGH
Network
openmrs openmrs OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… Update CWE-22
Path Traversal
CVE-2026-40075 2026-05-13 01:18 2026-05-6 Show GitHub Exploit DB Packet Storm
1454 6.5 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restrictions by utilizing … Update CWE-863
 Incorrect Authorization
CVE-2026-42610 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1455 8.9 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause XSS with the injection of svg element. The XSS can further be escalated t… Update CWE-79
Cross-site Scripting
CVE-2026-42611 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1456 5.4 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level accounts to execute arbitrary JavaScript. The issue … Update CWE-79
Cross-site Scripting
CVE-2026-42612 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1457 4.8 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rendered image HTML thro… Update CWE-79
Cross-site Scripting
CVE-2026-42841 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1458 6.5 MEDIUM
Local
linuxcontainers lxc lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network … Update CWE-863
 Incorrect Authorization
CVE-2026-39402 2026-05-13 01:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1459 5.3 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access t… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44201 2026-05-13 00:59 2026-05-12 Show GitHub Exploit DB Packet Storm
1460 6.5 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revis… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44197 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm