Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195061 9.8 緊急
Network 		Zammad - Zammad におけるハッシュ化されたパスワード自体でログインされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-5619 2017-04-3 17:27 2017-02-14 Show GitHub Exploit DB Packet Storm
195062 6.1 警告
Network 		UNINETT - mod_auth_mellon におけるクロスサイトセッション転送攻撃 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-6807 2017-04-3 17:13 2017-03-13 Show GitHub Exploit DB Packet Storm
195063 9.8 緊急
Network 		OnePlus - OnePlus 3 および 3T 上で稼動する OxygenOS における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5626 2017-04-3 17:08 2017-02-8 Show GitHub Exploit DB Packet Storm
195064 9.8 緊急
Network 		OnePlus - OnePlus 3 および 3T 用 OxygenOS における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5624 2017-04-3 17:08 2017-02-8 Show GitHub Exploit DB Packet Storm
195065 8.8 重要
Network 		Keekoonvision Technology Co., Ltd - Keekoon KK002 デバイス HD におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-6180 2017-04-3 17:06 2017-02-21 Show GitHub Exploit DB Packet Storm
195066 7.5 重要
Network 		MikroTik - MikroTik Router hAP Lite におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6444 2017-04-3 16:56 2017-03-2 Show GitHub Exploit DB Packet Storm
195067 6.8 警告
Adjacent 		エマソン - Emerson DeltaV Easy Security Management における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9345 2017-04-3 16:52 2016-11-29 Show GitHub Exploit DB Packet Storm
195068 5 警告
Adjacent 		エマソン - Emerson SE4801T0X Redundant および SE4801T1X Simplex Wireless I/O Card のファームウェアにおける SSH 機能が不必要に有効化される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-9347 2017-04-3 16:52 2016-11-29 Show GitHub Exploit DB Packet Storm
195069 6.5 警告
Network 		Hangzhou Hikvision Digital Technology - Hikvision NVR DS-76xxNI-E1/2 および DS-77xxxNI-E4 デバイスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-4409 2017-04-3 16:37 2015-11-9 Show GitHub Exploit DB Packet Storm
195070 6.5 警告
Network 		Hangzhou Hikvision Digital Technology - Hikvision NVR DS-76xxNI-E1/2 および DS-77xxxNI-E4 デバイスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-4408 2017-04-3 16:37 2015-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1311 8.1 HIGH
Network 		- - A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the pro… CWE-416
 Use After Free 		CVE-2026-22165 2026-05-7 04:05 2026-05-2 Show GitHub Exploit DB Packet Storm
1312 8.1 HIGH
Network 		- - A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the proce… CWE-416
 Use After Free 		CVE-2026-22166 2026-05-7 04:05 2026-05-2 Show GitHub Exploit DB Packet Storm
1313 7.8 HIGH
Local 		- - Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances this exploit could b… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-22167 2026-05-7 04:05 2026-05-2 Show GitHub Exploit DB Packet Storm
1314 - - - A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-29200 2026-05-7 04:05 2026-05-4 Show GitHub Exploit DB Packet Storm
1315 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK CSR, don't attempt to copy the … CWE-787
 Out-of-bounds Write 		CVE-2026-31699 2026-05-7 04:04 2026-05-1 Show GitHub Exploit DB Packet Storm
1316 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(), when PACKET_VNET_HDR is enabled, vnet_hdr point… CWE-362
Race Condition 		CVE-2026-31700 2026-05-7 04:01 2026-05-1 Show GitHub Exploit DB Packet Storm
1317 8.8 HIGH
Network 		- - A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is… CWE-35
 Path Traversal: '.../...//' 		CVE-2026-20034 2026-05-7 03:59 2026-05-7 Show GitHub Exploit DB Packet Storm
1318 7.2 HIGH
Network 		- - A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to i… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-20035 2026-05-7 03:59 2026-05-7 Show GitHub Exploit DB Packet Storm
1319 7.7 HIGH
Network 		- - A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely mana… CWE-284
Improper Access Control 		CVE-2026-20167 2026-05-7 03:59 2026-05-7 Show GitHub Exploit DB Packet Storm
1320 6.5 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have per… CWE-388
 7PK - Errors 		CVE-2026-20168 2026-05-7 03:59 2026-05-7 Show GitHub Exploit DB Packet Storm