Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195421 7.8 重要
Local 		Tenable, Inc. - Nessus における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-7850 2017-05-19 18:16 2017-04-11 Show GitHub Exploit DB Packet Storm
195422 5.5 警告
Local 		Tenable, Inc. - Nessus における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-7849 2017-05-19 18:16 2017-04-11 Show GitHub Exploit DB Packet Storm
195423 6.1 警告
Network 		MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-7897 2017-05-19 18:11 2017-04-19 Show GitHub Exploit DB Packet Storm
195424 7.5 重要
Network 		Nettle project
Canonical
レッドハット		 - Nettle の RSA および DSA 暗号コードにおける秘密鍵を取得される脆弱性 CWE-310
暗号の問題 		CVE-2016-6489 2017-05-19 18:00 2016-06-21 Show GitHub Exploit DB Packet Storm
195425 7.5 重要
Network 		Digium - Asterisk Open Source および Certified Asterisk の chain_sip におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-7551 2017-05-19 17:02 2016-09-9 Show GitHub Exploit DB Packet Storm
195426 5.5 警告
Local 		シマンテック - 複数の Symantec 製品の AntiVirus Decomposer エンジンの RAR ファイルパーサコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-5309 2017-05-19 17:01 2016-09-19 Show GitHub Exploit DB Packet Storm
195427 5.5 警告
Local 		シマンテック - 複数の Symantec 製品の AntiVirus Decomposer エンジンの RAR ファイルパーサコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-5310 2017-05-19 17:01 2016-09-19 Show GitHub Exploit DB Packet Storm
195428 7.8 重要
Local 		Artifex Software - Artifex Ghostscript の mark_curve 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2017-7948 2017-05-19 16:57 2017-04-18 Show GitHub Exploit DB Packet Storm
195429 6.1 警告
Network 		トレンドマイクロ - Trend Micro InterScan Messaging Security Virtual Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-7896 2017-05-19 16:57 2017-03-7 Show GitHub Exploit DB Packet Storm
195430 7 重要
Local 		Todd C. Miller - Linux 上で稼動する Sudo の sudo_noexec.so における noexec コマンド制限を回避される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-7032 2017-05-19 16:56 2016-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2101 4.9 MEDIUM
Network 		- - A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitrary local files.  Note: Software … CWE-22
Path Traversal 		CVE-2026-42780 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2102 6.5 MEDIUM
Adjacent 		- - When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel (TMM) resource utiliz… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42781 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2103 6.7 MEDIUM
Network 		- - A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate their privileges. A successful exploit may allow the attacker to cross a secur… CWE-121
Stack-based Buffer Overflow 		CVE-2026-42919 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2104 7.5 HIGH
Network 		- - When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42920 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2105 8.7 HIGH
Network 		- - An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation.  Note: Software versions… CWE-78
OS Command  		CVE-2026-42924 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2106 5.8 MEDIUM
Network 		- - When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the… CWE-172
 Encoding Error 		CVE-2026-42926 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2107 8.7 HIGH
Network 		- - When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system.  Note: Software versions which have … CWE-35
 Path Traversal: '.../...//' 		CVE-2026-42930 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2108 4.8 MEDIUM
Network 		- - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives ar… CWE-125
Out-of-bounds Read 		CVE-2026-42934 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2109 6.5 MEDIUM
Network 		- - Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attack… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-42937 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
2110 6.5 MEDIUM
Network 		- - A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi_pass is configured… CWE-789
CWE-823
 Memory Allocation with Excessive Size Value
 Use of Out-of-range Pointer Offset 		CVE-2026-42946 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm