Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195671 5.9 警告
Network 		profanity - profanity の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5592 2017-03-8 15:04 2017-01-24 Show GitHub Exploit DB Packet Storm
195672 5.9 警告
Network 		SleekXMPP project
Slixmpp project		 - SleekXMPP および Slixmpp の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5591 2017-03-8 15:04 2017-01-28 Show GitHub Exploit DB Packet Storm
195673 5.9 警告
Network 		Georg Lukas - yaxim および Bruno の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5589 2017-03-8 15:04 2017-01-30 Show GitHub Exploit DB Packet Storm
195674 6.1 警告
Network 		Schneider Electric - Schneider Electric homeLYnk Controller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-5157 2017-03-8 15:03 2017-01-18 Show GitHub Exploit DB Packet Storm
195675 9.8 緊急
Network 		Schneider Electric - Schneider Electric PowerLogic PM8ECC におけるデバイスへのアクセスを許容される脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2016-5818 2017-03-8 15:03 2016-10-18 Show GitHub Exploit DB Packet Storm
195676 7.5 重要
Network 		Mobile App Native project - WordPress 用 Mobile App Native プラグインにおけるリモートでファイルをアップロードされる脆弱性 CWE-254
セキュリティ機能 		CVE-2017-6104 2017-03-8 14:30 2017-02-27 Show GitHub Exploit DB Packet Storm
195677 6.1 警告
Network 		AnyVar project - WordPress 用 AnyVar プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-6103 2017-03-8 14:30 2017-02-21 Show GitHub Exploit DB Packet Storm
195678 6.1 警告
Network 		Blair Jordan - WordPress 用 Rockhoist Badges プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-6102 2017-03-8 14:30 2017-02-20 Show GitHub Exploit DB Packet Storm
195679 7.8 重要
Local 		IBM - IBM AIX における root 権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8972 2017-03-8 14:20 2016-12-15 Show GitHub Exploit DB Packet Storm
195680 5.5 警告
Local 		IBM - IBM AIX におけるシステムクラッシュを引き起こされる脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8944 2017-03-8 14:20 2016-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1041 5.3 MEDIUM
Network 		- - A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_practices of the file server.py. The manipulation of the argument Language results i… CWE-22
Path Traversal 		CVE-2026-7588 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1042 7.3 HIGH
Network 		hashcat hashcat A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The iss… CWE-787
CWE-122
 Out-of-bounds Write
Heap-based Buffer Overflow 		CVE-2026-42483 2026-05-2 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
1043 8.6 HIGH
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to… CWE-121
Stack-based Buffer Overflow 		CVE-2026-42469 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1044 7.5 HIGH
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a … CWE-121
Stack-based Buffer Overflow 		CVE-2026-42468 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1045 7.5 HIGH
Network 		exim exim In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in… CWE-684
 Incorrect Provision of Specified Functionality 		CVE-2026-40684 2026-05-2 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
1046 10.0 CRITICAL
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers t… CWE-121
Stack-based Buffer Overflow 		CVE-2026-37541 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1047 8.4 HIGH
Local 		- - OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF h… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-37540 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1048 - - - An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) … - CVE-2026-37457 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1049 - - - A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request. - CVE-2026-26461 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1050 9.6 CRITICAL
Network 		- - A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the proce… CWE-416
 Use After Free 		CVE-2026-22166 2026-05-2 03:16 2026-05-2 Show GitHub Exploit DB Packet Storm