Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194421 7.8 重要
Local
Fabrice Bellard - QEMU おけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-7493 2017-06-19 12:16 2017-05-16 Show GitHub Exploit DB Packet Storm
194422 9.8 緊急
Network
The PHP Group - PHP の Zend/zend_string.h の zend_string_extend 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-8923 2017-06-19 12:14 2017-05-12 Show GitHub Exploit DB Packet Storm
194423 7.5 重要
Network
VirusTotal - YARA の libyara/sizedstr.c の sized_string_cmp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-8929 2017-06-19 11:56 2017-05-14 Show GitHub Exploit DB Packet Storm
194424 6.5 警告
Network
Apache Software Foundation - Ambari における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-5655 2017-06-19 11:55 2017-05-12 Show GitHub Exploit DB Packet Storm
194425 7.5 重要
Network
Apache Software Foundation - Ambari における Ambari サーバが実行されるホスト上のファイルへの不正な読み取りアクセス権を取得される脆弱性 CWE-91
ブラインド XPath インジェクション
CVE-2017-5654 2017-06-19 11:55 2017-05-12 Show GitHub Exploit DB Packet Storm
194426 7.8 重要
Local
Linux - Linux Kernel の net/ipx/af_ipx.c の ipxitf_ioctl 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-7487 2017-06-19 11:48 2017-05-2 Show GitHub Exploit DB Packet Storm
194427 5.5 警告
Local
Linux - Linux Kernel の kernel/bpf/verifier.c の do_check 関数における重要なアドレス情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-9150 2017-06-19 11:42 2017-05-14 Show GitHub Exploit DB Packet Storm
194428 7.5 重要
Network
Google - Android の soundtrigger/ISoundTriggerHwService.cpp における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2015-1529 2017-06-19 11:36 2015-05-4 Show GitHub Exploit DB Packet Storm
194429 5.9 警告
Network
YottaMark, Inc. - iOS 用 YottaMark ShopWell - Healthy Diet & Grocery Food Scanner アプリケーションにおけるサーバになりすまされる脆弱性 CWE-295
不正な証明書検証
CVE-2017-8942 2017-06-19 11:33 2017-05-15 Show GitHub Exploit DB Packet Storm
194430 5.9 警告
Network
Interval International - iOS 用 Interval International アプリケーションにおけるサーバになりすまされる脆弱性 CWE-295
不正な証明書検証
CVE-2017-8941 2017-06-19 11:33 2017-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2201 8.1 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existi… CWE-269
CWE-285
CWE-639
CWE-837
 Improper Privilege Management
Improper Authorization
 Authorization Bypass Through User-Controlled Key
 Improper Enforcement of a Single, Unique Action
CVE-2026-42609 2026-05-15 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2202 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo… CWE-77
Command Injection
CVE-2026-44869 2026-05-15 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
2203 1.8 LOW
Physics
- - Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. CWE-693
 Protection Mechanism Failure
CVE-2026-30904 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2204 7.8 HIGH
Local
- - External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via loca… CWE-73
 External Control of File Name or Path
CVE-2026-30905 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2205 7.8 HIGH
Local
- - Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. CWE-426
 Untrusted Search Path
CVE-2026-30906 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2206 5.4 MEDIUM
Network
- - podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without … CWE-79
Cross-site Scripting
CVE-2026-43644 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2207 3.7 LOW
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments t… CWE-328
 Use of Weak Hash
CVE-2026-44582 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2208 7.6 HIGH
Network
- - Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-44516 2026-05-15 03:14 2026-05-15 Show GitHub Exploit DB Packet Storm
2209 - - - The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redi… CWE-601
Open Redirect
CVE-2026-44503 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
2210 - - - Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, giv… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-44504 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm