Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193271 5.5 警告
Local 		Linux - Linux Kernel におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2010-5329 2017-05-22 11:28 2010-07-12 Show GitHub Exploit DB Packet Storm
193272 6.1 警告
Network 		Novell - Novell GroupWise の管理者コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5760 2017-05-22 11:11 2016-08-23 Show GitHub Exploit DB Packet Storm
193273 9.8 緊急
Network 		Novell - Novell GroupWise の Post Office Agent における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-5762 2017-05-22 11:11 2016-08-23 Show GitHub Exploit DB Packet Storm
193274 7.8 重要
Local 		Mock project
Fedora Project		 - mock の scm プラグインにおける chroot 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6299 2017-05-19 18:48 2016-09-13 Show GitHub Exploit DB Packet Storm
193275 6.5 警告
Network 		ImageMagick - ImageMagick の mtv.c の ReadMTVImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8355 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
193276 6.5 警告
Network 		ImageMagick - ImageMagick の bmp.c の ReadBMPImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8354 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
193277 6.5 警告
Network 		ImageMagick - ImageMagick の pict.c の ReadPICTImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8353 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
193278 6.5 警告
Network 		ImageMagick - ImageMagick の xwd.c の ReadXWDImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8352 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
193279 6.5 警告
Network 		ImageMagick - ImageMagick の pcd.c の ReadPCDImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8351 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
193280 6.5 警告
Network 		ImageMagick - ImageMagick の png.c の ReadJNGImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-8350 2017-05-19 18:20 2017-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 4.3 MEDIUM
Network 		jenkins azure_ad Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. CWE-601
Open Redirect 		CVE-2026-42525 2026-05-5 23:25 2026-04-29 Show GitHub Exploit DB Packet Storm
1142 8.8 HIGH
Network 		agilonhealth minerva An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their … CWE-285
Improper Authorization 		CVE-2026-5781 2026-05-5 23:24 2026-04-28 Show GitHub Exploit DB Packet Storm
1143 8.1 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authentic… CWE-284
Improper Access Control 		CVE-2026-5780 2026-05-5 23:22 2026-04-28 Show GitHub Exploit DB Packet Storm
1144 5.5 MEDIUM
Local 		canonical pdfunite PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen… CWE-120
Classic Buffer Overflow 		CVE-2018-25306 2026-05-5 23:22 2026-04-30 Show GitHub Exploit DB Packet Storm
1145 8.8 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the inf… CWE-284
Improper Access Control 		CVE-2026-5779 2026-05-5 23:20 2026-04-28 Show GitHub Exploit DB Packet Storm
1146 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-bas… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-7834 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
1147 - - - In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message. CWE-125
Out-of-bounds Read 		CVE-2026-6918 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
1148 7.5 HIGH
Network 		- - The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficient escaping on the user supplied … CWE-89
SQL Injection 		CVE-2026-4304 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
1149 4.4 MEDIUM
Local 		mercurycom mipc252w_firmware A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-35901 2026-05-5 22:41 2026-04-28 Show GitHub Exploit DB Packet Storm
1150 6.2 MEDIUM
Local 		mercurycom mipc252w_firmware The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication paramete… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-35902 2026-05-5 22:40 2026-04-28 Show GitHub Exploit DB Packet Storm