Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195631 5 警告 日本電気
日立
NTP Project
- NTP の ntpd の config_auth 機能における暗号保護メカニズムを破られる脆弱性 CWE-Other
その他
CVE-2014-9293 2017-03-9 15:28 2014-11-3 Show GitHub Exploit DB Packet Storm
195632 7.5 重要
Network
ISC, Inc.
日本電気
- ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2776 2017-03-9 15:27 2016-09-27 Show GitHub Exploit DB Packet Storm
195633 6.1 警告
Network
Adcon Telemetry - Adcon Telemetry A850 Telemetry Gateway Base Station の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2274 2017-03-9 13:56 2016-12-8 Show GitHub Exploit DB Packet Storm
195634 8.8 重要
Network
FATEK Automation Corporation - Fatek Automation PM Designer V3 および FV Designer におけるクラッシュを引き起こされる脆弱性 CWE-119
バッファエラー
CVE-2016-5796 2017-03-9 13:50 2016-10-13 Show GitHub Exploit DB Packet Storm
195635 7.5 重要
Network
FATEK Automation Corporation - Fatek Automation PM Designer V3 および FV Designer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5798 2017-03-9 13:50 2016-10-13 Show GitHub Exploit DB Packet Storm
195636 9.8 緊急
Network
libxpm project - libXpm における整数オーバーフローの脆弱性 CWE-119
CWE-190
CWE-787
CVE-2016-10164 2017-03-9 11:29 2016-12-12 Show GitHub Exploit DB Packet Storm
195637 5.9 警告
Network
ChatSecure
Zom
- ChatSecure および Zom の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5590 2017-03-8 19:10 2017-01-24 Show GitHub Exploit DB Packet Storm
195638 6.1 警告
Network
Visonic - Visonic PowerLink2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5811 2017-03-8 19:06 2016-12-13 Show GitHub Exploit DB Packet Storm
195639 9.8 緊急
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアクセス権を取得される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5801 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
195640 7.5 重要
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアカウント認証情報が漏えいする脆弱性 CWE-200
情報漏えい
CVE-2016-5786 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 6.3 MEDIUM
Network
- - A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function download_website of the file src/index.ts of the component MCP Interface. Performing a manipulation o… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7642 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1082 4.3 MEDIUM
Network
- - A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cros… Update CWE-346
CWE-942
 Origin Validation Error
 Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-7643 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1083 7.3 HIGH
Network
- - A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote … Update CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7644 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1084 6.5 MEDIUM
Network
- - A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP … Update CWE-22
Path Traversal
CVE-2026-7645 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1085 6.3 MEDIUM
Network
- - A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP Interface. Performing … Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7653 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1086 5.6 MEDIUM
Network
- - A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the component HuggingFace Transf… Update CWE-74
CWE-94
Injection
Code Injection
CVE-2026-7669 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1087 4.3 MEDIUM
Network
- - A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/control… Update CWE-22
Path Traversal
CVE-2026-7676 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1088 3.5 LOW
Network
- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7677 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
1089 6.3 MEDIUM
Network
- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… Update CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7678 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
1090 7.3 HIGH
Network
- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… Update CWE-287
Improper Authentication
CVE-2026-7679 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm