Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194671 7.5 重要
Network
GNU Project - GNU Binutils で配布される Binary File Descriptor ライブラリにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-7301 2017-04-26 15:20 2017-03-29 Show GitHub Exploit DB Packet Storm
194672 7.5 重要
Network
GNU Project - GNU Binutils で配布される Binary File Descriptor ライブラリにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-7300 2017-04-26 15:20 2017-03-29 Show GitHub Exploit DB Packet Storm
194673 5.5 警告
Local
GNU Project - GNU Binutils で配布される Binary File Descriptor ライブラリにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-7299 2017-04-26 15:20 2017-03-29 Show GitHub Exploit DB Packet Storm
194674 9.8 緊急
Network
AlienVault
NfSen
- 複数の AlienVault 製品および NfSen における認可・権限・アクセス制御に関する脆弱性 CWE-264
CWE-noinfo
CVE-2017-6972 2017-04-26 14:48 2017-01-24 Show GitHub Exploit DB Packet Storm
194675 5.5 警告
Local
JasPer Project
Fedora Project
- JasPer の libjasper/bmp/bmp_dec.c の bmp_getdata 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8884 2017-04-26 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
194676 6.5 警告
Network
NetIQ - NetIQ IDM ServiceNow Driver における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2016-1603 2017-04-26 14:41 2016-07-5 Show GitHub Exploit DB Packet Storm
194677 4.3 警告
Network
Plone Foundation - Plone におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5524 2017-04-26 14:19 2017-01-17 Show GitHub Exploit DB Packet Storm
194678 9.8 緊急
Network
サムスン - Exynos AP チップセットを伴う Samsung デバイスのソフトウェアの GPU ドライバの arm/t7xx/r5p0/mali_kbase_core_linux.c における脆弱性 CWE-125
境界外読み取り
CVE-2017-5538 2017-04-26 14:11 2017-01-19 Show GitHub Exploit DB Packet Storm
194679 7.8 重要
Local
APNG Disassembler project - APNGDis におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-6191 2017-04-26 12:27 2017-03-14 Show GitHub Exploit DB Packet Storm
194680 9.8 緊急
Network
kankunit - Konke Smart Plug における機器の管理権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7279 2017-04-26 12:27 2014-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1201 3.5 LOW
Network
- - Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio's preferences module (database backup, test email, htaccess generation) fire v… CWE-352
 Origin Validation Error
CVE-2026-41663 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
1202 4.3 MEDIUM
Network
flowiseai flowise A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipulation of the argumen… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-8027 2026-05-7 23:50 2026-05-7 Show GitHub Exploit DB Packet Storm
1203 3.7 LOW
Network
flowiseai flowise A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component Endpoint. Perf… CWE-200
CWE-284
NVD-CWE-noinfo
Information Exposure
Improper Access Control
CVE-2026-8028 2026-05-7 23:47 2026-05-7 Show GitHub Exploit DB Packet Storm
1204 8.8 HIGH
Network
- - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gosoft Software Industry and Trade Ltd. Co. Proticaret E-Commerce allows Cross-Site Scripting (XS… CWE-79
Cross-site Scripting
CVE-2026-3953 2026-05-7 23:44 2026-05-7 Show GitHub Exploit DB Packet Storm
1205 9.6 CRITICAL
Network
google chrome Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security… CWE-416
 Use After Free
CVE-2026-7910 2026-05-7 23:43 2026-05-7 Show GitHub Exploit DB Packet Storm
1206 9.8 CRITICAL
Network
- - Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Lidera… CWE-346
 Origin Validation Error
CVE-2026-6508 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm
1207 8.3 HIGH
Network
- - Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDri… CWE-770
CWE-915
 Allocation of Resources Without Limits or Throttling
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2025-14341 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm
1208 9.6 CRITICAL
Network
- - URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Parameter Injection. This issue affects DivvyDrive: from 4.8.2.9 befor… CWE-601
Open Redirect
CVE-2026-6795 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm
1209 8.8 HIGH
Network
- - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyD… CWE-79
Cross-site Scripting
CVE-2026-5784 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm
1210 8.8 HIGH
Network
- - Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS). This issue affec… CWE-80
Basic XSS
CVE-2026-6002 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm