Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196581 7.8 重要
Local
Delta Electronics - 複数の Delta Electronics 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5805 2017-04-4 15:56 2016-12-13 Show GitHub Exploit DB Packet Storm
196582 7.8 重要
Local
Delta Electronics - 複数の Delta Electronics 製品における悪意のあるファイルを読み込まれる脆弱性 CWE-787
境界外書き込み
CVE-2016-5802 2017-04-4 15:56 2016-12-13 Show GitHub Exploit DB Packet Storm
196583 6.5 警告
Adjacent
ASUSTeK Computer Inc. - ASUS RT-N56U Wireless Router のファームウェアにおける脆弱性 CWE-noinfo
情報不足
CVE-2017-5632 2017-04-4 15:54 2017-01-29 Show GitHub Exploit DB Packet Storm
196584 7.2 重要
Network
ソフォス - Sophos Web Appliance Remote / Secure Web Gateway サーバの Web 管理インターフェースにおけるリモートコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2016-9554 2017-04-4 15:38 2016-11-22 Show GitHub Exploit DB Packet Storm
196585 7.8 重要
Local
CA Technologies - 複数の CA 製品で使用される CA Common Services の casrvc プログラムにおける任意のファイルを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2016-9795 2017-04-4 15:30 2016-12-2 Show GitHub Exploit DB Packet Storm
196586 8.8 重要
Network
マカフィー - McAfee Virus Scan Enterprise for Linux に複数の脆弱性 CWE-113
CWE-200
CWE-290
CWE-302
CWE-347
CWE-352
CWE-75
CWE-79
CWE-89
CWE-94
CVE-2016-8016
CVE-2016-8017
CVE-2016-8018
CVE-2016-8019
CVE-2016-8020
CVE-2016-8021
CVE-2016-8022
CVE-2016-8023
CVE-2016-8024
CVE-2016-8025
2017-04-4 15:18 2016-12-12 Show GitHub Exploit DB Packet Storm
196587 8.6 重要
Network
Locus Energy - 複数の Locus Energy LGate 製品における脆弱性 CWE-20
不適切な入力確認
CVE-2016-5782 2017-04-4 15:10 2016-12-6 Show GitHub Exploit DB Packet Storm
196588 7.2 重要
Network
XOOPS - XOOPS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-7290 2017-04-4 11:31 2017-03-30 Show GitHub Exploit DB Packet Storm
196589 7.2 重要
Network
DELL EMC (旧 EMC Corporation) - EMC Isilon OneFS における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9871 2017-04-3 18:27 2016-12-6 Show GitHub Exploit DB Packet Storm
196590 5.3 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Crypto-J の PKCS#12 ファイルにおけるタイミング攻撃を実行される脆弱性 CWE-200
情報漏えい
CVE-2016-8217 2017-04-3 18:27 2016-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1491 7.5 HIGH
Network
- - When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42920 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1492 8.7 HIGH
Network
- - An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation.  Note: Software versions… CWE-78
OS Command 
CVE-2026-42924 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1493 5.8 MEDIUM
Network
- - When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the… CWE-172
 Encoding Error
CVE-2026-42926 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1494 8.7 HIGH
Network
- - When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system.  Note: Software versions which have … CWE-35
 Path Traversal: '.../...//'
CVE-2026-42930 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1495 4.8 MEDIUM
Network
- - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives ar… CWE-125
Out-of-bounds Read
CVE-2026-42934 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1496 6.5 MEDIUM
Network
- - Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attack… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-42937 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1497 6.5 MEDIUM
Network
- - A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi_pass is configured… CWE-789
CWE-823
 Memory Allocation with Excessive Size Value
 Use of Out-of-range Pointer Offset
CVE-2026-42946 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1498 8.8 HIGH
Network
- - A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device. CWE-78
OS Command 
CVE-2026-6281 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1499 8.1 HIGH
Network
- - A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to ot… CWE-22
Path Traversal
CVE-2026-6282 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1500 4.8 MEDIUM
Network
- - aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be ab… CWE-295
Improper Certificate Validation 
CVE-2026-8367 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm