Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192641 6.1 警告
Network
Craft CMS - Craft CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-8384 2017-06-5 15:40 2017-04-27 Show GitHub Exploit DB Packet Storm
192642 5.3 警告
Network
Craft CMS - Craft CMS におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2017-8383 2017-06-5 15:40 2017-04-27 Show GitHub Exploit DB Packet Storm
192643 4.7 警告
Local
Underbit Technologies, Inc. - Underbit MAD libmad の layer3.c の mad_layer_III 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-8372 2017-06-5 15:32 2017-04-30 Show GitHub Exploit DB Packet Storm
192644 5.3 警告
Network
MetalGenix - GeniXCMS における alertDanger MSG_USER_EMAIL_EXIST 保護メカニズムを回避される脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8388 2017-06-5 15:28 2017-04-25 Show GitHub Exploit DB Packet Storm
192645 7.8 重要
Local
秋田稔 (Akky) - 7-ZIP32.DLL で作成された自己解凍書庫における任意の DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2017-2107 2017-06-5 11:52 2017-02-17 Show GitHub Exploit DB Packet Storm
192646 4.8 警告
Network
日産証券株式会社 - スマートフォンアプリ「アクセスCX」における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2017-2110 2017-06-5 11:21 2017-03-1 Show GitHub Exploit DB Packet Storm
192647 8.8 重要
Adjacent
株式会社アイ・オー・データ機器 - アイ・オー・データ製の複数のネットワークカメラ製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-2113 2017-06-5 11:07 2017-03-2 Show GitHub Exploit DB Packet Storm
192648 8 重要
Adjacent
アライドテレシス - CentreCOM AR260S V2 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-2125 2017-06-5 10:42 2017-03-30 Show GitHub Exploit DB Packet Storm
192649 9.8 緊急
Network
Cloud Foundry Foundation
Pivotal Software, Inc.
- Cloud Foundry の Cloud Controller における重要なユーザ認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-5006 2017-06-5 10:27 2016-07-26 Show GitHub Exploit DB Packet Storm
192650 7.8 重要
Local
Google - Qualcomm ブートローダにおける権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10276 2017-06-2 20:02 2016-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1421 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the pee… NVD-CWE-noinfo
CVE-2026-31692 2026-05-7 05:05 2026-04-30 Show GitHub Exploit DB Packet Storm
1422 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XENVER_build_id) is neither NUL t… CWE-787
 Out-of-bounds Write
CVE-2026-31786 2026-05-7 04:44 2026-04-30 Show GitHub Exploit DB Packet Storm
1423 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open. W… CWE-415
 Double Free
CVE-2026-31787 2026-05-7 04:38 2026-04-30 Show GitHub Exploit DB Packet Storm
1424 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-control… NVD-CWE-noinfo
CVE-2026-31694 2026-05-7 04:23 2026-05-1 Show GitHub Exploit DB Packet Storm
1425 3.9 LOW
Network
- - HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system comp… CWE-1188
 Insecure Default Initialization of Resource
CVE-2025-31974 2026-05-7 04:20 2026-05-7 Show GitHub Exploit DB Packet Storm
1426 8.8 HIGH
Network
- - Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to execute arbitrary code by exploiti… CWE-184
 Incomplete Blacklist
CVE-2026-41934 2026-05-7 04:20 2026-05-7 Show GitHub Exploit DB Packet Storm
1427 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv->lowerdev->dev)` f… CWE-416
 Use After Free
CVE-2026-31695 2026-05-7 04:19 2026-05-1 Show GitHub Exploit DB Packet Storm
1428 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there are two paths for parsing key… CWE-787
 Out-of-bounds Write
CVE-2026-31696 2026-05-7 04:17 2026-05-1 Show GitHub Exploit DB Packet Storm
1429 9.8 CRITICAL
Network
- - OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml. CWE-611
XXE
CVE-2026-38429 2026-05-7 04:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1430 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for the CPU, don't attempt to cop… CWE-787
 Out-of-bounds Write
CVE-2026-31697 2026-05-7 04:08 2026-05-1 Show GitHub Exploit DB Packet Storm