Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194431 7.5 重要
Network 		Huawei - 複数 Huawei 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8773 2017-05-9 18:11 2016-11-11 Show GitHub Exploit DB Packet Storm
194432 6.7 警告
Local 		Huawei - Huawei UTPS における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8769 2017-05-9 18:11 2016-11-16 Show GitHub Exploit DB Packet Storm
194433 7.8 重要
Local 		Huawei - 複数の Huawei スマートフォンのソフトウェアにおける PXN ディフェンスメカニズムを無効にされる脆弱性 CWE-254
セキュリティ機能 		CVE-2016-8768 2017-05-9 18:11 2016-10-26 Show GitHub Exploit DB Packet Storm
194434 3.3 低
Local 		Huawei - Huawei P9 のソフトウェアのION メモリ管理モジュールにおける初期化されていないメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-8757 2017-05-9 18:11 2016-10-26 Show GitHub Exploit DB Packet Storm
194435 7.5 重要
Network 		Huawei - 複数の Huawei スイッチのソフトウェアにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2404 2017-05-9 18:11 2016-02-17 Show GitHub Exploit DB Packet Storm
194436 5.5 警告
Local 		Huawei - Huawei MBB E3272s のソフトウェアにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-7847 2017-05-9 18:11 2015-08-17 Show GitHub Exploit DB Packet Storm
194437 7.5 重要
Network 		Huawei - 複数の Huawei 製品のソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-8572 2017-05-9 18:11 2014-10-10 Show GitHub Exploit DB Packet Storm
194438 5.5 警告
Local 		Linux - Linux Kernel の net/ipv4/ping.c の ping_unhash 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-2671 2017-05-9 18:00 2017-03-24 Show GitHub Exploit DB Packet Storm
194439 7.8 重要
Local 		Linux - MSM デバイスなどの製品用 Qualcomm Innovation Center Android コントリビューションで使用される Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-5870 2017-05-9 18:00 2016-11-30 Show GitHub Exploit DB Packet Storm
194440 7.5 重要
Network 		Apache Software Foundation - Apache Geode における Pulse のデータブラウザページにアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2017-5649 2017-05-9 17:40 2016-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 9.8 CRITICAL
Network 		github enterprise_server A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusi… Update CWE-436
CWE-918
 Interpretation Conflict
Server-Side Request Forgery (SSRF)  		CVE-2026-8034 2026-05-12 02:18 2026-05-8 Show GitHub Exploit DB Packet Storm
1162 6.5 MEDIUM
Network 		- - Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custom /authenticate/login view. Flask-Security's default /login… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-7820 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1163 8.1 HIGH
Network 		- - Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent k… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-7819 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1164 7.0 HIGH
Local 		- - Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents (using Python's standard object-seria… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-7818 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1165 6.5 MEDIUM
Network 		- - Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied api_key_file and api_url preferences were passed to the … New CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-7817 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1166 8.8 HIGH
Network 		- - OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An aut… New CWE-89
SQL Injection 		CVE-2026-7816 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1167 8.8 HIGH
Network 		- - SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were concatenated directly i… New CWE-89
SQL Injection 		CVE-2026-7815 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1168 7.7 HIGH
Network 		- - Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray() from within a page body, dumping the entire mer… New CWE-200
Information Exposure 		CVE-2026-44738 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1169 - - - grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.10.49.5, the application fails… New CWE-79
Cross-site Scripting 		CVE-2026-44737 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1170 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and th… New CWE-787
 Out-of-bounds Write 		CVE-2026-43500 2026-05-12 02:16 2026-05-11 Show GitHub Exploit DB Packet Storm