Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194021 7.5 重要
Network 		SAP - SAP AS JAVA の P4 SERVERCORE コンポーネントの msp におけるシステム情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-5372 2017-02-7 15:51 2017-01-13 Show GitHub Exploit DB Packet Storm
194022 7.5 重要
Network 		SAP - SAP Adaptive Server Enterprise の OData サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-5371 2017-02-7 15:51 2017-01-13 Show GitHub Exploit DB Packet Storm
194023 6.1 警告
Network 		DELL EMC (旧 EMC Corporation) - EMC RSA Security Analytics における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8215 2017-02-7 14:49 2016-09-13 Show GitHub Exploit DB Packet Storm
194024 6.7 警告
Local 		DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における Avamar サーバを侵害される脆弱性 CWE-275
パーミッションの問題 		CVE-2016-8214 2017-02-7 14:48 2016-09-13 Show GitHub Exploit DB Packet Storm
194025 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework における認証を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6603 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
194026 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework における平文のパスワードを取得される脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2016-6602 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
194027 7.5 重要
Network 		Zoho Corporation - ZOHO WebNMS Framework のファイルダウンロード機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6601 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
194028 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework のファイルアップロード機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6600 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
194029 9.8 緊急
Network 		Michael Davis - python-jose における脆弱性 CWE-361
時間とステータス 		CVE-2016-7036 2017-02-7 14:20 2016-09-5 Show GitHub Exploit DB Packet Storm
194030 9.8 緊急
Network 		The GIFLIB project - GIFLIB の gifcolor.c における脆弱性 CWE-415
CWE-416
CVE-2016-3177 2017-02-7 14:19 2016-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 6.8 MEDIUM
Network 		- - Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.  This vulnerability … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-31991 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
732 4.3 MEDIUM
Network 		- - The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 seq… CWE-20
 Improper Input Validation  		CVE-2026-6231 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
733 6.5 MEDIUM
Adjacent 		- - A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks cou… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-3756 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
734 - - - Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-u… CWE-416
CWE-787
 Use After Free
 Out-of-bounds Write 		CVE-2026-6100 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
735 - - - Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the … CWE-77
Command Injection 		CVE-2026-4786 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
736 7.5 HIGH
Network 		- - Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in tim… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-5086 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
737 6.1 MEDIUM
Network 		- - Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed … CWE-79
Cross-site Scripting 		CVE-2026-0512 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
738 4.2 MEDIUM
Network 		- - Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauth… CWE-539
 Use of Persistent Cookies Containing Sensitive Information 		CVE-2026-24318 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
739 4.3 MEDIUM
Network 		- - The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a lo… CWE-862
 Missing Authorization 		CVE-2026-27672 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
740 4.9 MEDIUM
Network 		- - Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operation… CWE-862
 Missing Authorization 		CVE-2026-27673 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm