Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192721 6.1 警告
Network
BlackBerry - BlackBerry Enterprise Server Self-Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1915 2017-05-17 13:53 2016-02-17 Show GitHub Exploit DB Packet Storm
192722 8.8 重要
Network
BlackBerry - BlackBerry Enterprise Server Self-Service の com.rim.mdm.ui.server.ImageServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1914 2017-05-17 13:52 2016-02-17 Show GitHub Exploit DB Packet Storm
192723 5.5 警告
Local
Erik de Castro Lopo - libsndfile の flac_buffer_copy() 関数におけるセグメンテーション違反を引き起こされる脆弱性 CWE-119
バッファエラー
CVE-2017-7742 2017-05-17 12:32 2017-03-24 Show GitHub Exploit DB Packet Storm
192724 5.5 警告
Local
Erik de Castro Lopo - libsndfile の flac_buffer_copy() 関数におけるセグメンテーション違反を引き起こされる脆弱性 CWE-119
バッファエラー
CVE-2017-7741 2017-05-17 12:32 2017-03-24 Show GitHub Exploit DB Packet Storm
192725 6.5 警告
Network
ImageMagick - ImageMagick の coders/rgf.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-19
データ処理
CVE-2016-7540 2017-05-17 12:00 2016-01-19 Show GitHub Exploit DB Packet Storm
192726 6.5 警告
Network
ImageMagick - ImageMagick の coders/psd.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み
CVE-2016-7538 2017-05-17 12:00 2016-03-12 Show GitHub Exploit DB Packet Storm
192727 6.5 警告
Network
ImageMagick - ImageMagick の MagickCore/memory.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7537 2017-05-17 12:00 2016-03-7 Show GitHub Exploit DB Packet Storm
192728 6.5 警告
Network
ImageMagick - ImageMagick の magick/profile.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-7536 2017-05-17 12:00 2016-02-14 Show GitHub Exploit DB Packet Storm
192729 6.5 警告
Network
ImageMagick - ImageMagick の coders/psd.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み
CVE-2016-7535 2017-05-17 12:00 2016-02-13 Show GitHub Exploit DB Packet Storm
192730 6.5 警告
Network
ImageMagick - ImageMagick の generic decoder におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7534 2017-05-17 12:00 2016-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
601 8.0 HIGH
Network
- - This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned… Update CWE-863
 Incorrect Authorization
CVE-2026-5712 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
602 6.3 MEDIUM
Local
- - Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could p… New CWE-59
Link Following
CVE-2026-27105 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
603 5.3 MEDIUM
Network
- - Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targeting the merge-viewer endpoint. Attacker… New CWE-352
 Origin Validation Error
CVE-2018-25298 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
604 8.4 HIGH
Local
- - Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attackers can inject malici… New CWE-120
Classic Buffer Overflow
CVE-2018-25299 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
605 6.2 MEDIUM
Local
- - librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply crafted SVG input to the… New CWE-120
Classic Buffer Overflow
CVE-2018-25305 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
606 6.2 MEDIUM
Local
- - PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen… New CWE-120
Classic Buffer Overflow
CVE-2018-25306 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
607 7.3 HIGH
Network
- - A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections. When an archive is downloaded from the internet and e… New CWE-290
 Authentication Bypass by Spoofing
CVE-2025-50328 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
608 9.1 CRITICAL
Network
- - Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the c… New CWE-200
CWE-441
CWE-913
Information Exposure
Confused Deputy
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-7381 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
609 7.1 HIGH
Network
- - All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary c… New CWE-306
Missing Authentication for Critical Function
CVE-2025-13030 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm
610 - - - Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adja… New CWE-611
XXE
CVE-2024-39847 2026-05-1 00:48 2026-04-30 Show GitHub Exploit DB Packet Storm