Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195431 7.5 重要
Network
IBM - IBM UrbanCode Deploy におけるリモートの UCD エージェントマシン上で実行処理を引き起こされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-2942 2017-03-2 14:41 2016-11-14 Show GitHub Exploit DB Packet Storm
195432 5.4 警告
Network
IBM - IBM InfoSphere Information Server におけるページを互換モードでレンダリングされる脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8999 2017-03-2 13:58 2016-10-25 Show GitHub Exploit DB Packet Storm
195433 5.3 警告
Network
IBM - IBM InfoSphere Information Server における情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-8982 2017-03-2 13:58 2016-10-25 Show GitHub Exploit DB Packet Storm
195434 4.7 警告
Local
IBM - IBM InfoSphere Information Server における任意のコマンドを実行される脆弱性 CWE-200
情報漏えい
CVE-2015-7493 2017-03-2 13:58 2015-09-29 Show GitHub Exploit DB Packet Storm
195435 7.2 重要
Network
IBM - IBM Tivoli Key Lifecycle Manager における任意のファイルをアップロードされる脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2016-6104 2017-03-2 13:52 2016-06-29 Show GitHub Exploit DB Packet Storm
195436 4.3 警告
Network
IBM - IBM Jazz Team Server におけるデプロイメント情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-2866 2017-03-2 13:52 2016-03-9 Show GitHub Exploit DB Packet Storm
195437 7.2 重要
Network
Mail-Masta - WordPress 用 Mail Masta プラグインの /inc/campaign_save.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-6098 2017-03-2 13:49 2017-02-27 Show GitHub Exploit DB Packet Storm
195438 7.2 重要
Network
Mail-Masta - WordPress 用 Mail Masta プラグインの /inc/campaign/count_of_send.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-6097 2017-03-2 13:49 2017-02-27 Show GitHub Exploit DB Packet Storm
195439 7.2 重要
Network
Mail-Masta - WordPress 用 Mail Masta プラグインの /inc/lists/view-list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-6096 2017-03-2 13:49 2017-02-27 Show GitHub Exploit DB Packet Storm
195440 9.8 緊急
Network
Mail-Masta - WordPress 用 Mail Masta プラグインの /inc/lists/csvexport.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-6095 2017-03-2 13:49 2017-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 - - - Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism. Noir programs can i… CWE-131
Incorrect Calculation of Buffer Size
CVE-2026-41197 2026-04-30 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm
802 - - - STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems. Versions 1.5.10 through 1.6.7 have a reflected Cross-Site Scrip… CWE-79
Cross-site Scripting
CVE-2026-41200 2026-04-30 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm
803 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CT_PTP_NUM from 1 to 4 to support 256 playback streams, but… NVD-CWE-noinfo
CVE-2026-31602 2026-04-30 05:16 2026-04-25 Show GitHub Exploit DB Packet Storm
804 9.8 CRITICAL
Network
- - radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metachara… CWE-78
OS Command 
CVE-2026-6942 2026-04-30 05:16 2026-04-24 Show GitHub Exploit DB Packet Storm
805 8.5 HIGH
Network
socialengine socialengine SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via the uri request parameter is no… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41461 2026-04-30 05:16 2026-04-24 Show GitHub Exploit DB Packet Storm
806 9.8 CRITICAL
Network
socialengine socialengine SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized befo… CWE-89
SQL Injection
CVE-2026-41460 2026-04-30 05:16 2026-04-24 Show GitHub Exploit DB Packet Storm
807 6.2 MEDIUM
Local
apple ipados
iphone_os
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-28950 2026-04-30 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
808 5.1 MEDIUM
Local
- - EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in thi… CWE-427
 Uncontrolled Search Path Element
CVE-2025-10549 2026-04-30 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
809 4.8 MEDIUM
Network
- - Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime upda… CWE-295
CWE-296
CWE-494
Improper Certificate Validation 
 Improper Following of a Certificate's Chain of Trust
 Download of Code Without Integrity Check
CVE-2025-10539 2026-04-30 05:16 2026-04-28 Show GitHub Exploit DB Packet Storm
810 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset on VF devices that don't support migratio… NVD-CWE-noinfo
CVE-2026-31601 2026-04-30 05:15 2026-04-25 Show GitHub Exploit DB Packet Storm