Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193771 4.3 警告
Network
マカフィー - McAfee VirusScan Enterprise の Scriptscan COM オブジェクトにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-8030 2017-06-1 19:11 2016-09-9 Show GitHub Exploit DB Packet Storm
193772 8.8 重要
Network
D-Link Systems, Inc. - 複数の D-Link DCS カメラにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-7852 2017-06-1 18:42 2017-02-22 Show GitHub Exploit DB Packet Storm
193773 5.3 警告
Network
Simtech Ltd. - CS-Cart日本語版におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-2139 2017-06-1 17:39 2017-04-6 Show GitHub Exploit DB Packet Storm
193774 3.3
Local
Todd C. Miller - sudo における読み取りアクセス用の任意のファイルを開かれる脆弱性 CWE-200
情報漏えい
CVE-2014-9680 2017-06-1 17:24 2014-10-16 Show GitHub Exploit DB Packet Storm
193775 9.8 緊急
Network
ICU project
Google
- Google Chrome で使用される C/C++ 用 ICU の Regular Expressions パッケージにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9654 2017-06-1 17:24 2014-11-19 Show GitHub Exploit DB Packet Storm
193776 6.1 警告
Network
株式会社内田洋行 - ASSETBASE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-2134 2017-06-1 17:14 2017-04-11 Show GitHub Exploit DB Packet Storm
193777 7.8 重要
Local
株式会社セキュアブレイン - PhishWall クライアント Internet Explorer版のインストーラにおける任意の DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2017-2130 2017-06-1 17:11 2017-03-22 Show GitHub Exploit DB Packet Storm
193778 9.8 緊急
Network
PoDoFo project - PoDoFo の base/PdfParser.cpp の PdfParser::ReadObjects 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8378 2017-06-1 17:02 2017-05-4 Show GitHub Exploit DB Packet Storm
193779 5.3 警告
Network
ジュニパーネットワークス - Juniper Networks Junos OS における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-2340 2017-06-1 17:02 2017-04-12 Show GitHub Exploit DB Packet Storm
193780 7.1 重要
Network
オラクル - Oracle E-Business Suite の Oracle One-to-One Fulfillment における Audience workbench に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3434 2017-06-1 17:00 2017-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1581 5.3 MEDIUM
Network
- - Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to … CWE-757
Algorithm Downgrade
CVE-2026-1677 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1582 5.3 MEDIUM
Network
- - The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid use… CWE-204
 Response Discrepancy Information Exposure
CVE-2024-0391 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1583 7.3 HIGH
Network
- - Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the intended security … CWE-863
 Incorrect Authorization
CVE-2025-10908 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1584 5.3 MEDIUM
Network
- - In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to be injected into HTTP responses… CWE-74
Injection
CVE-2025-8154 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1585 6.3 MEDIUM
Network
- - The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended permission checks. This… CWE-281
 Improper Preservation of Permissions
CVE-2025-8325 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1586 8.6 HIGH
Network
- - The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. This vulnerabilit… CWE-400
 Uncontrolled Resource Consumption
CVE-2025-10470 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1587 6.4 MEDIUM
Adjacent
- - Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations.… CWE-284
CWE-863
Improper Access Control
 Incorrect Authorization
CVE-2025-9973 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1588 6.1 MEDIUM
Local
- - Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue stack. Because the d… CWE-674
 Uncontrolled Recursion
CVE-2026-1681 2026-05-14 00:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1589 8.3 HIGH
Network
- - Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/use… CWE-269
 Improper Privilege Management
CVE-2026-42562 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1590 - - - Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escal… CWE-863
 Incorrect Authorization
CVE-2026-42571 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm