Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195881 5 警告
Adjacent
エマソン - Emerson SE4801T0X Redundant および SE4801T1X Simplex Wireless I/O Card のファームウェアにおける SSH 機能が不必要に有効化される脆弱性 CWE-254
セキュリティ機能
CVE-2016-9347 2017-04-3 16:52 2016-11-29 Show GitHub Exploit DB Packet Storm
195882 6.5 警告
Network
Hangzhou Hikvision Digital Technology - Hikvision NVR DS-76xxNI-E1/2 および DS-77xxxNI-E4 デバイスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-4409 2017-04-3 16:37 2015-11-9 Show GitHub Exploit DB Packet Storm
195883 6.5 警告
Network
Hangzhou Hikvision Digital Technology - Hikvision NVR DS-76xxNI-E1/2 および DS-77xxxNI-E4 デバイスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-4408 2017-04-3 16:37 2015-11-9 Show GitHub Exploit DB Packet Storm
195884 6.5 警告
Network
Hangzhou Hikvision Digital Technology - Hikvision NVR DS-76xxNI-E1/2 および DS-77xxxNI-E4 デバイスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-4407 2017-04-3 16:37 2015-11-9 Show GitHub Exploit DB Packet Storm
195885 6.1 警告
Network
Roundcube.net - Roundcube の rcube_utils.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-6820 2017-04-3 16:07 2017-03-10 Show GitHub Exploit DB Packet Storm
195886 9.8 緊急
Network
Sage CRM - SageCRM の Component Manager 機能におけるコンポーネントの追加を許可する脆弱性 CWE-254
セキュリティ機能
CVE-2017-5219 2017-04-3 15:22 2017-01-24 Show GitHub Exploit DB Packet Storm
195887 9.8 緊急
Network
bitlbee - bitlbee-libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-5668 2017-03-31 17:30 2017-01-30 Show GitHub Exploit DB Packet Storm
195888 7.5 重要
Network
bitlbee - BitlBee におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-10189 2017-03-31 17:30 2016-11-14 Show GitHub Exploit DB Packet Storm
195889 9.8 緊急
Network
bitlbee - bitlbee-libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-10188 2017-03-31 17:30 2016-11-14 Show GitHub Exploit DB Packet Storm
195890 8.1 重要
Network
WP Technologies, Inc - WePresent WiPG-1500 デバイスのファームウェアにおけるハードコードされたアカウントでデバイスにログインされる脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2017-6351 2017-03-31 17:29 2017-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1521 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name o… NVD-CWE-noinfo
CVE-2026-43118 2026-05-9 02:30 2026-05-6 Show GitHub Exploit DB Packet Storm
1522 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr… NVD-CWE-noinfo
CVE-2026-43132 2026-05-9 02:26 2026-05-6 Show GitHub Exploit DB Packet Storm
1523 7.9 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload o… NVD-CWE-noinfo
CVE-2026-43133 2026-05-9 02:25 2026-05-6 Show GitHub Exploit DB Packet Storm
1524 4.8 MEDIUM
Network
linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an attacker's OVN database… CWE-295
Improper Certificate Validation 
CVE-2026-40243 2026-05-9 02:23 2026-05-7 Show GitHub Exploit DB Packet Storm
1525 8.2 HIGH
Network
quarkus quarkus Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the sec… CWE-863
 Incorrect Authorization
CVE-2026-39852 2026-05-9 02:18 2026-05-6 Show GitHub Exploit DB Packet Storm
1526 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… CWE-79
Cross-site Scripting
CVE-2026-42794 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1527 9.8 CRITICAL
Network
- - Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRE… CWE-1392
 Use of Default Credentials
CVE-2026-42072 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1528 6.1 MEDIUM
Network
- - MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthenticated attacker t… CWE-80
Basic XSS
CVE-2026-42030 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1529 - - - pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, t… CWE-89
SQL Injection
CVE-2026-41889 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1530 7.8 HIGH
Local
- - PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes (used for isolated/PHPT test execution) as -d name=value command-line argu… CWE-88
CWE-93
Argument Injection
CRLF Injection
CVE-2026-41570 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm