Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195881 6.5 警告
Adjacent
IBM - IBM BigFix Platform における BES サーバをクラッシュさせられる脆弱性 CWE-20
不適切な入力確認
CVE-2016-6084 2017-02-15 16:07 2016-12-20 Show GitHub Exploit DB Packet Storm
195882 5.3 警告
Network
IBM - IBM WebSphere Message Broker 用 WebAdmin コンテキストにおけるディレクトリをリスト化される脆弱性 CWE-200
情報漏えい
CVE-2016-6080 2017-02-15 16:07 2016-12-1 Show GitHub Exploit DB Packet Storm
195883 5.4 警告
Network
Apache Software Foundation - Apache Brooklyn におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3165 2017-02-15 14:04 2017-02-15 Show GitHub Exploit DB Packet Storm
195884 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおける /var/miniupnpd.conf に no deny ルールが存在する脆弱性 CWE-399
リソース管理の問題
CVE-2016-10186 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195885 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおける /var/miniupnpd.conf に secure_mode=no 行が存在する脆弱性 CWE-254
セキュリティ機能
CVE-2016-10185 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195886 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータの qmiweb における ..%2f トラバーサルでファイルを読まれる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10184 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195887 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータの qmiweb における ../ トラバーサルでディレクトリリスティングをされる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10183 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195888 9.8 緊急
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータの qmiweb におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2016-10182 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195889 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータの qmiweb における CfgType=get_homeCfg リクエストに対して重要な情報を提供される脆弱性 CWE-200
情報漏えい
CVE-2016-10181 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
195890 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおけるシード値 srand(time(0)) に基づき WPS PIN を生成される脆弱性 CWE-338
暗号における脆弱な PRNG の使用
CVE-2016-10180 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 5.5 MEDIUM
Local
wireshark wireshark BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-121
Stack-based Buffer Overflow
CVE-2026-6538 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
32 5.5 MEDIUM
Local
wireshark wireshark SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-1325
 Improperly Controlled Sequential Memory Allocation
CVE-2026-6867 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
33 5.5 MEDIUM
Local
wireshark wireshark WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-1325
 Improperly Controlled Sequential Memory Allocation
CVE-2026-6869 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
34 5.5 MEDIUM
Local
wireshark wireshark GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-824
 Access of Uninitialized Pointer
CVE-2026-6870 2026-05-2 03:11 2026-04-30 Show GitHub Exploit DB Packet Storm
35 7.5 HIGH
Network
apache neethi Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-prod… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42402 2026-05-2 03:08 2026-05-1 Show GitHub Exploit DB Packet Storm
36 7.5 HIGH
Network
apache neethi Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references (where Policy A references Policy B which references Po… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42403 2026-05-2 03:08 2026-05-1 Show GitHub Exploit DB Packet Storm
37 7.2 HIGH
Network
apache neethi Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a poli… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42404 2026-05-2 03:06 2026-05-1 Show GitHub Exploit DB Packet Storm
38 9.8 CRITICAL
Network
apache mina The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was inc… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-42778 2026-05-2 02:55 2026-05-1 Show GitHub Exploit DB Packet Storm
39 9.8 CRITICAL
Network
apache mina The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, on… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-42779 2026-05-2 02:55 2026-05-1 Show GitHub Exploit DB Packet Storm
40 5.9 MEDIUM
Network
apache airflow Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` without an SSL context, so no certificate validation was performed on the TLS upgrade. A man-in-the-middle between … New CWE-295
Improper Certificate Validation 
CVE-2026-41016 2026-05-2 02:54 2026-04-30 Show GitHub Exploit DB Packet Storm