Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196391 8.8 重要
Network 		IBM - IBM Tivoli Storage Manager for Virtual Environments におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-6033 2017-03-9 17:14 2016-12-14 Show GitHub Exploit DB Packet Storm
196392 9.8 緊急
Network 		IBM - IBM Websphere MQ JMS クライアントにおける任意の Java コードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2016-0360 2017-03-9 17:14 2017-01-6 Show GitHub Exploit DB Packet Storm
196393 6.1 警告
Network 		IBM - IBM Resilient におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6062 2017-03-9 16:56 2016-11-10 Show GitHub Exploit DB Packet Storm
196394 7.5 重要
Network 		IBM - IBM Security Access Manager における重要な情報を解読される脆弱性 CWE-326
不適切な暗号強度 		CVE-2016-5919 2017-03-9 16:56 2016-06-29 Show GitHub Exploit DB Packet Storm
196395 7.8 重要
Local 		Debian
GraphicsMagick		 - GraphicsMagick の MagickCore/memory.c の AcquireMagickMemory 関数における脆弱性 CWE-119
バッファエラー 		CVE-2016-8862 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
196396 5.5 警告
Local 		ImageMagick - ImageMagick の MagickCore/pixel-accessor.h の IsPixelMonochrome 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-8678 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
196397 7.8 重要
Local 		openSUSE project
Debian
ImageMagick		 - ImageMagick の MagickCore/quantum.c の AcquireQuantumPixels 関数における脆弱性 CWE-119
バッファエラー 		CVE-2016-8677 2017-03-9 16:51 2016-09-16 Show GitHub Exploit DB Packet Storm
196398 9.8 緊急
Network 		Aerospike, Inc. - Aerospike Database Server の RW ファブリックメッセージのパーティクルタイプにおける境界外インデックスに関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2016-9053 2017-03-9 16:49 2016-10-26 Show GitHub Exploit DB Packet Storm
196399 9.8 緊急
Network 		Aerospike, Inc. - Aerospike Database Server のバッチ処理フィールドの構文解析機能における境界外書き込みの脆弱性 CWE-787
境界外書き込み 		CVE-2016-9051 2017-03-9 16:49 2016-10-26 Show GitHub Exploit DB Packet Storm
196400 7.5 重要
Network 		Aerospike, Inc. - Aerospike Database Server の Fabric_Worker コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-9049 2017-03-9 16:49 2016-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 5.3 MEDIUM
Network 		- - A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929decba. Affected by this vulnerability is the function toc_transformer of the file pageindex/page_in… New CWE-404
CWE-835
 Improper Resource Shutdown or Release
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-8318 2026-05-12 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1092 - - - Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-7790 2026-05-12 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1093 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cow_co… New CWE-93
CRLF Injection 		CVE-2026-43969 2026-05-12 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1094 - - - WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including database-related details. Thi… New CWE-200
Information Exposure 		CVE-2026-42871 2026-05-12 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1095 9.9 CRITICAL
Network 		- - FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [… New CWE-306
CWE-918
Missing Authentication for Critical Function
Server-Side Request Forgery (SSRF)  		CVE-2026-42864 2026-05-12 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1096 - - - Data Space Portal is an open-source Software as a Service (SaaS) solution designed to streamline Dataspace management. From version 2.1.1 to before version 7.3.2, there is insufficient authorization … New CWE-602
CWE-863
 Client-Side Enforcement of Server-Side Security
 Incorrect Authorization 		CVE-2026-42160 2026-05-12 04:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1097 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for which the input_mappi… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-43251 2026-05-12 03:51 2026-05-6 Show GitHub Exploit DB Packet Storm
1098 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating … Update CWE-667
 Improper Locking 		CVE-2026-43252 2026-05-12 03:49 2026-05-6 Show GitHub Exploit DB Packet Storm
1099 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause soft lockups under… Update CWE-667
 Improper Locking 		CVE-2026-43253 2026-05-12 03:40 2026-05-6 Show GitHub Exploit DB Packet Storm
1100 6.5 MEDIUM
Adjacent 		watchguard agent Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulner… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-41287 2026-05-12 03:36 2026-05-7 Show GitHub Exploit DB Packet Storm