Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195871 7.8 重要
Local
Huawei - HiSuite における入力確認に関する脆弱性 CWE-20
CWE-284
CVE-2016-8273 2017-05-1 11:45 2016-09-5 Show GitHub Exploit DB Packet Storm
195872 5.3 警告
Local
Huawei - HiSuite における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2016-8272 2017-05-1 11:45 2016-09-5 Show GitHub Exploit DB Packet Storm
195873 8 重要
Adjacent
サムスン - Samsung Account における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0864 2017-05-1 11:42 2015-01-26 Show GitHub Exploit DB Packet Storm
195874 8 重要
Adjacent
サムスン - GALAXY Apps における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0863 2017-05-1 11:42 2015-01-26 Show GitHub Exploit DB Packet Storm
195875 5.5 警告
Local
Linux - Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-7346 2017-05-1 10:33 2017-03-30 Show GitHub Exploit DB Packet Storm
195876 7.8 重要
Local
Linux - Linux Kernel の KEYS サブシステムにおける権限を取得される脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-2647 2017-05-1 10:33 2017-03-2 Show GitHub Exploit DB Packet Storm
195877 9.8 緊急
Network
Siklu - Siklu EtherHaul デバイスにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-7318 2017-04-28 19:04 2017-02-20 Show GitHub Exploit DB Packet Storm
195878 9.8 緊急
Network
Siklu - Siklu EtherHaul 無線機におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-10308 2017-04-28 19:04 2016-02-4 Show GitHub Exploit DB Packet Storm
195879 4.9 警告
Network
フォーティネット - FortiOS における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2016-7542 2017-04-28 18:08 2016-12-2 Show GitHub Exploit DB Packet Storm
195880 5.9 警告
Network
フォーティネット - FortiOS におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2016-7541 2017-04-28 18:08 2016-11-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1871 8.4 HIGH
Network
- - A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher throu… CWE-35
 Path Traversal: '.../...//'
CVE-2026-25705 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1872 9.9 CRITICAL
Network
- - Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on … CWE-863
 Incorrect Authorization
CVE-2026-41050 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1873 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… CWE-250
 Execution with Unnecessary Privileges
CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1874 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1875 8.8 HIGH
Adjacent
- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… CWE-79
Cross-site Scripting
CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1876 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… CWE-78
OS Command 
CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1877 7.2 HIGH
Network
- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… CWE-78
OS Command 
CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1878 5.3 MEDIUM
Network
- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… CWE-776
XML Entity Expansion
CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1879 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke… CWE-77
Command Injection
CVE-2026-23823 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1880 9.1 CRITICAL
Network
- - Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data… - CVE-2025-11159 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm