Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194291 7.5 重要
Network 		シスコシステムズ - Cisco TelePresence IX5000 シリーズの Web フレームワークにおける影響を受けるデバイス上の任意のファイルにアクセスされる脆弱性 CWE-20
CWE-22
CVE-2017-6652 2017-06-16 16:57 2017-05-17 Show GitHub Exploit DB Packet Storm
194292 7.8 重要
Local 		シスコシステムズ - アプライアンス用 Cisco Policy Suite ソフトウェア配布の一部としてインストールされたスクリプトファイルにおける特権レベルを root に昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6623 2017-06-16 16:57 2017-05-17 Show GitHub Exploit DB Packet Storm
194293 9.8 緊急
Network 		シスコシステムズ - Cisco Prime Collaboration Provisioning の Web インターフェースおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6622 2017-06-16 16:57 2017-05-17 Show GitHub Exploit DB Packet Storm
194294 7.5 重要
Network 		シスコシステムズ - Cisco Prime Collaboration Provisioning の Web インターフェースおける重要なデータにアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2017-6621 2017-06-16 16:57 2017-05-17 Show GitHub Exploit DB Packet Storm
194295 7.5 重要
Network 		シスコシステムズ - Cisco Sourcefire Snort におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6658 2017-06-16 16:57 2017-05-15 Show GitHub Exploit DB Packet Storm
194296 7.5 重要
Network 		シスコシステムズ - Cisco Sourcefire Snort におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6657 2017-06-16 16:57 2017-05-15 Show GitHub Exploit DB Packet Storm
194297 9.8 緊急
Network 		ytnef project - ytnef におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-9058 2017-06-16 16:48 2017-05-24 Show GitHub Exploit DB Packet Storm
194298 5.5 警告
Local 		Linux - Linux Kernel の NFSv4 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-9059 2017-06-16 16:42 2017-05-10 Show GitHub Exploit DB Packet Storm
194299 9.8 緊急
Network 		Libav - libav における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-9051 2017-06-16 16:36 2017-03-25 Show GitHub Exploit DB Packet Storm
194300 7.8 重要
Local 		smb4k - smb4k における root 権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-8849 2017-06-16 16:27 2017-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1971 7.5 HIGH
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected bo… CWE-674
 Uncontrolled Recursion 		CVE-2026-44289 2026-05-14 05:50 2026-05-14 Show GitHub Exploit DB Packet Storm
1972 7.5 HIGH
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.… CWE-674
 Uncontrolled Recursion 		CVE-2026-45740 2026-05-14 05:50 2026-05-14 Show GitHub Exploit DB Packet Storm
1973 8.8 HIGH
Network 		microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40357 2026-05-14 05:48 2026-05-13 Show GitHub Exploit DB Packet Storm
1974 9.6 CRITICAL
Network 		ivanti xtraction External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to … CWE-73
 External Control of File Name or Path 		CVE-2026-8043 2026-05-14 05:34 2026-05-13 Show GitHub Exploit DB Packet Storm
1975 5.0 MEDIUM
Local 		- - csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-41051 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1976 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation … CWE-787
 Out-of-bounds Write 		CVE-2026-34684 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1977 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation … CWE-787
 Out-of-bounds Write 		CVE-2026-34683 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1978 5.9 MEDIUM
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fe… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44577 2026-05-14 05:00 2026-05-14 Show GitHub Exploit DB Packet Storm
1979 5.5 MEDIUM
Local 		pengutronix barebox barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directo… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-34962 2026-05-14 04:58 2026-05-12 Show GitHub Exploit DB Packet Storm
1980 7.7 HIGH
Local 		pengutronix barebox barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against buffer capacity in fs/ext4/ext4_common.… CWE-125
Out-of-bounds Read 		CVE-2026-34961 2026-05-14 04:57 2026-05-12 Show GitHub Exploit DB Packet Storm