Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196441 7.5 重要
Network
Artifex Software - Artifex Software MuJS の chartorune 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7563 2017-01-31 18:06 2016-09-20 Show GitHub Exploit DB Packet Storm
196442 8.1 重要
Network
CA Technologies - CA Service Desk Manager および CA Service Desk Management の RESTful Web サービスにおけるタスク情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10086 2017-01-31 18:02 2016-12-30 Show GitHub Exploit DB Packet Storm
196443 9.1 緊急
Network
Libical project - Libical におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9584 2017-01-31 17:53 2016-12-15 Show GitHub Exploit DB Packet Storm
196444 7.5 重要
Network
Belledonne Communications - Bzrtp ライブラリにおけるなりすまし攻撃を実行される脆弱性 CWE-254
セキュリティ機能
CVE-2016-6271 2017-01-31 17:50 2016-04-1 Show GitHub Exploit DB Packet Storm
196445 8.8 重要
Local
SELinuxProject
Fedora Project
レッドハット
- SELinux policycoreutil におけるサンドボックス外で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7545 2017-01-31 17:42 2016-09-23 Show GitHub Exploit DB Packet Storm
196446 7.5 重要
Network
サムスン - Samsung Exynos の特定のチップセットを伴う Android 用 Exynos fimg2d ドライバにおける重要な情報を取得される脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9279 2017-01-31 17:24 2016-08-5 Show GitHub Exploit DB Packet Storm
196447 5.5 警告
Local
サムスン - Samsung Exynos の特定のチップセットを伴う Android 用 Exynos fimg2d ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9278 2017-01-31 17:24 2016-06-11 Show GitHub Exploit DB Packet Storm
196448 6.1 警告
Network
Atlassian - Atlassian Confluence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6283 2017-01-31 15:53 2016-08-4 Show GitHub Exploit DB Packet Storm
196449 7.5 重要
Network
Apache Software Foundation - Groovy LDAP API の main/java/org/apache/directory/groovyldap/LDAP.java における LDAP エントリポイズニング攻撃を実行される脆弱性 CWE-254
セキュリティ機能
CVE-2016-6497 2017-01-31 15:27 2016-10-17 Show GitHub Exploit DB Packet Storm
196450 8.4 重要
Local
GNU Project
Fedora Project
- Bash における root 権限で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-7543 2017-01-31 15:27 2016-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 9.8 CRITICAL
Network
- - D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the s… New CWE-798
 Use of Hard-coded Credentials
CVE-2026-42373 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
322 8.8 HIGH
Adjacent
- - D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the s… New CWE-798
 Use of Hard-coded Credentials
CVE-2026-42372 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
323 9.6 CRITICAL
Network
- - Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in th… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-42090 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
324 4.6 MEDIUM
Network
- - PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched… New CWE-22
Path Traversal
CVE-2026-42080 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
325 8.6 HIGH
Local
- - PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtin… New CWE-95
Eval Injection
CVE-2026-42079 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
326 4.6 MEDIUM
Network
- - PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This… New CWE-22
Path Traversal
CVE-2026-42078 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
327 5.2 MEDIUM
Local
- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all Ja… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-42077 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
328 7.1 HIGH
Network
- - Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can … New CWE-94
Code Injection
CVE-2026-40563 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
329 - - - wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog. New - CVE-2026-38669 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm
330 8.8 HIGH
Network
- - NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with exporttemplate or con… New CWE-183
 Permissive List of Allowed Inputs
CVE-2026-29514 2026-05-5 02:16 2026-05-5 Show GitHub Exploit DB Packet Storm