Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192361 9.8 緊急
Network
Dolibarr ERP & CRM - Dolibarr ERP/CRM の user/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-9435 2017-06-27 15:12 2017-05-30 Show GitHub Exploit DB Packet Storm
192362 6.5 警告
Network
Odoo - Odoo の tools.file_open におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-9416 2017-06-27 15:12 2017-06-3 Show GitHub Exploit DB Packet Storm
192363 8.8 重要
Network
OpenEMR - OpenEMR における危険なタイプのファイルをアップロードされる脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2017-9380 2017-06-27 15:12 2017-05-23 Show GitHub Exploit DB Packet Storm
192364 6.1 警告
Network
Tiki Software Community Association - Tiki Wiki CMS Groupware の lib/core/TikiFilter/PreventXss.php における XSS フィルタを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-9305 2017-06-27 15:12 2017-04-5 Show GitHub Exploit DB Packet Storm
192365 8.2 重要
Local
Todd C. Miller - Todd Miller の Sudo の get_process_ttyname() 関数における情報を公開される脆弱性 CWE-20
不適切な入力確認
CVE-2017-1000368 2017-06-27 15:12 2017-05-30 Show GitHub Exploit DB Packet Storm
192366 7.8 重要
Local
Palo Alto Networks - Palo Alto Networks Panorama VM アプライアンスの PAN-OS における任意の Python コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-6531 2017-06-27 15:12 2015-09-15 Show GitHub Exploit DB Packet Storm
192367 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Uniscribe におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8534 2017-06-27 15:10 2017-06-13 Show GitHub Exploit DB Packet Storm
192368 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8533 2017-06-27 15:10 2017-06-13 Show GitHub Exploit DB Packet Storm
192369 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8532 2017-06-27 15:09 2017-06-13 Show GitHub Exploit DB Packet Storm
192370 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8531 2017-06-27 15:09 2017-06-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1581 5.3 MEDIUM
Local
- - The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service… CWE-400
 Uncontrolled Resource Consumption
CVE-2022-26523 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1582 6.5 MEDIUM
Network
- - Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field. CWE-78
OS Command 
CVE-2022-45899 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1583 5.8 MEDIUM
Network
- - solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization w… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-42279 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1584 7.5 HIGH
Network
- - Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP port 445. CWE-400
 Uncontrolled Resource Consumption
CVE-2024-27686 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1585 6.3 MEDIUM
Network
- - /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter. CWE-77
Command Injection
CVE-2024-30167 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1586 7.3 HIGH
Network
- - An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php (when the "api" parameter is set) is not properly sanitized bef… CWE-78
OS Command 
CVE-2025-67888 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1587 - - - Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally all… - CVE-2025-69691 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
1588 - - - Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerabilit… CWE-74
Injection
CVE-2025-67486 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
1589 - - - Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email addresses match. T… CWE-287
Improper Authentication
CVE-2026-41574 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
1590 7.5 HIGH
Network
coredns.io coredns CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport w… CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-33190 2026-05-9 01:01 2026-05-6 Show GitHub Exploit DB Packet Storm