Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192241 5.3 警告
Network 		F5 Networks - F5 BIG-IP APM における範囲エラーに関する脆弱性 CWE-118
インデックス化が可能なリソースの不適切なアクセス (範囲エラー) 		CVE-2017-0302 2017-06-6 16:34 2017-05-5 Show GitHub Exploit DB Packet Storm
192242 6.1 警告
Network 		F5 Networks - F5 BIG-IP APM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9257 2017-06-6 16:28 2016-11-9 Show GitHub Exploit DB Packet Storm
192243 3.3 低
Local 		RuboCop project - RuboCop における他のユーザのキャッシュファイルを改ざんされる脆弱性 CWE-254
セキュリティ機能 		CVE-2017-8418 2017-06-6 16:26 2017-05-3 Show GitHub Exploit DB Packet Storm
192244 9.8 緊急
Network 		ベリタス - Veritas NetBackup アプライアンスにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-8859 2017-06-6 16:23 2017-05-7 Show GitHub Exploit DB Packet Storm
192245 5.5 警告
Local 		Linux - Linux Kernel の KEYS サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-7472 2017-06-6 16:14 2017-04-27 Show GitHub Exploit DB Packet Storm
192246 3.3 低
Local 		MaruUo Factory - MaruUo Factory 製の複数のアタッシェケース製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-7843 2017-06-6 16:12 2017-01-16 Show GitHub Exploit DB Packet Storm
192247 3.3 低
Local 		HiBARA Software - アタッシェケースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-7842 2017-06-6 16:10 2017-01-16 Show GitHub Exploit DB Packet Storm
192248 7.3 重要
Network 		NPO法人Rubyプログラミング少年団 - smalruby-editor における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-2096 2017-06-6 15:39 2017-01-24 Show GitHub Exploit DB Packet Storm
192249 4.2 警告
Network 		サイボウズ - サイボウズ リモートサービスマネージャーにおけるクライアント証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2016-7815 2017-06-6 15:36 2017-01-11 Show GitHub Exploit DB Packet Storm
192250 4.7 警告
Network 		株式会社アイ・オー・データ機器 - アイ・オー・データ製の複数のネットワークカメラ製品における HTTP ヘッダインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2111 2017-06-6 15:35 2017-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 7.3 HIGH
Network 		- - A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The… CWE-259
CWE-798
Use of Hard-coded Password 
 Use of Hard-coded Credentials 		CVE-2026-7579 2026-05-4 23:16 2026-05-1 Show GitHub Exploit DB Packet Storm
922 7.2 HIGH
Network 		- - SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attack… CWE-89
SQL Injection 		CVE-2026-7435 2026-05-4 23:16 2026-05-1 Show GitHub Exploit DB Packet Storm
923 9.6 CRITICAL
Network 		- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. … CWE-22
Path Traversal 		CVE-2026-5166 2026-05-4 23:16 2026-04-30 Show GitHub Exploit DB Packet Storm
924 8.8 HIGH
Network 		- - Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus … CWE-59
Link Following 		CVE-2026-5161 2026-05-4 23:16 2026-04-30 Show GitHub Exploit DB Packet Storm
925 8.8 HIGH
Network 		- - Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects P… CWE-93
CRLF Injection 		CVE-2026-5140 2026-05-4 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
926 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-4928 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
927 6.7 MEDIUM
Local 		- - In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti… CWE-843
Type Confusion 		CVE-2026-20451 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
928 6.5 MEDIUM
Adjacent 		- - In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with… CWE-617
 Reachable Assertion 		CVE-2026-20450 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
929 6.5 MEDIUM
Adjacent 		- - In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with n… CWE-120
Classic Buffer Overflow 		CVE-2026-20449 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm
930 6.7 MEDIUM
Local 		- - In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System priv… CWE-280
Improper Handling of Insufficient Permissions or Privileges  		CVE-2026-20448 2026-05-4 23:16 2026-05-4 Show GitHub Exploit DB Packet Storm