Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192771 6.5 警告
Network
SolarWinds - SolarWinds Log & Event Manager におけるサーバのファイルシステムを閲覧される脆弱性 CWE-200
情報漏えい
CVE-2017-7646 2017-05-16 17:14 2017-04-18 Show GitHub Exploit DB Packet Storm
192772 9.8 緊急
Network
Intellinet - Intellinet NFC-30ir IP Camera における Web ディレクトリ内でベンダ提供の CGI へアクセスされる脆弱性 CWE-22
CWE-798
CVE-2017-7462 2017-05-16 17:04 2017-04-7 Show GitHub Exploit DB Packet Storm
192773 8.8 重要
Network
Synology Inc. - Synology Photo Station における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-10322 2017-05-16 16:59 2016-01-28 Show GitHub Exploit DB Packet Storm
192774 7.8 重要
Local
Synology Inc. - Synology Photo Station における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10323 2017-05-16 16:59 2016-01-28 Show GitHub Exploit DB Packet Storm
192775 9.8 緊急
Network
Schneider Electric - Schneider Electric homeLYnk Controller におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-7689 2017-05-16 16:53 2017-02-21 Show GitHub Exploit DB Packet Storm
192776 8.8 重要
Network
SolarWinds - SolarWinds Log & Event Manager における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2017-7647 2017-05-16 16:48 2017-04-18 Show GitHub Exploit DB Packet Storm
192777 9.8 緊急
Network
Apache Software Foundation - Apache TomEE の EjbObjectInputStream クラスにおける任意のコードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2016-0779 2017-05-16 16:47 2016-03-16 Show GitHub Exploit DB Packet Storm
192778 6.1 警告
Network
フォーティネット - FortiMail における不特定のクロスサイトスクリプティングングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3125 2017-05-16 16:42 2017-04-4 Show GitHub Exploit DB Packet Storm
192779 8.1 重要
Network
Foscam - Foscam ネットワークデバイスにおける暗号保護メカニズムを破られる脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2017-7648 2017-05-16 16:40 2017-04-9 Show GitHub Exploit DB Packet Storm
192780 9.8 緊急
Network
Fiyo CMS - Fiyo CMS における webshell をアップロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2017-7625 2017-05-16 16:30 2017-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
841 8.8 HIGH
Network
- - BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attack… CWE-22
Path Traversal
CVE-2018-25308 2026-05-1 00:44 2026-04-30 Show GitHub Exploit DB Packet Storm
842 6.2 MEDIUM
Local
- - SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an oversized string. Attackers can in… CWE-120
Classic Buffer Overflow
CVE-2018-25313 2026-05-1 00:44 2026-04-30 Show GitHub Exploit DB Packet Storm
843 7.5 HIGH
Network
- - Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both hea… CWE-444
HTTP Request Smuggling
CVE-2026-40560 2026-05-1 00:13 2026-04-29 Show GitHub Exploit DB Packet Storm
844 4.3 MEDIUM
Network
- - Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vu… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-23773 2026-05-1 00:13 2026-04-29 Show GitHub Exploit DB Packet Storm
845 4.3 MEDIUM
Network
- - Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. CWE-601
Open Redirect
CVE-2026-42525 2026-05-1 00:13 2026-04-29 Show GitHub Exploit DB Packet Storm
846 - - - Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to tri… CWE-125
Out-of-bounds Read
CVE-2026-2810 2026-05-1 00:13 2026-04-30 Show GitHub Exploit DB Packet Storm
847 6.5 MEDIUM
Network
- - Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Serv… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-6914 2026-05-1 00:13 2026-04-30 Show GitHub Exploit DB Packet Storm
848 6.3 MEDIUM
Network
- - An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect h… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-6915 2026-05-1 00:13 2026-04-30 Show GitHub Exploit DB Packet Storm
849 4.8 MEDIUM
Network
- - wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpos… CWE-20
 Improper Input Validation 
CVE-2026-1858 2026-05-1 00:13 2026-04-30 Show GitHub Exploit DB Packet Storm
850 7.4 HIGH
Network
- - In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server CWE-59
Link Following
CVE-2026-41882 2026-05-1 00:13 2026-04-30 Show GitHub Exploit DB Packet Storm