Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196751 6.1 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2938 2017-02-13 11:53 2016-11-2 Show GitHub Exploit DB Packet Storm
196752 3.7
Network
IBM - IBM BigFix Platform における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0297 2017-02-13 11:53 2016-11-7 Show GitHub Exploit DB Packet Storm
196753 3.3
Local
IBM - IBM BigFix Platform におけるログファイルに重要な情報を格納される脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2016-0296 2017-02-13 11:53 2016-11-7 Show GitHub Exploit DB Packet Storm
196754 5.4 警告
Network
IBM - IBM Campaign におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0265 2017-02-13 11:52 2016-10-18 Show GitHub Exploit DB Packet Storm
196755 6.1 警告
Network
Atlassian - Atlassian JIRA の includes/decorators/global-translations.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6285 2017-02-10 17:34 2016-09-27 Show GitHub Exploit DB Packet Storm
196756 5.5 警告
Local
libdwarf project - libdwarf の get_abbrev_array_info 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み
CVE-2016-2050 2017-02-10 16:39 2016-01-19 Show GitHub Exploit DB Packet Storm
196757 9.8 緊急
Network
シスコシステムズ - Cisco TelePresence MCU ソフトウェアのカーネルのプロプライエタリデバイスドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2017-3792 2017-02-10 15:18 2017-01-25 Show GitHub Exploit DB Packet Storm
196758 10 緊急
Network
シスコシステムズ - Cisco Prime Home の Web ベースの GUI における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2017-3791 2017-02-10 15:18 2017-02-1 Show GitHub Exploit DB Packet Storm
196759 5.4 警告
Network
Apache Software Foundation - Guacamole のファイルブラウザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1566 2017-02-10 14:42 2016-02-1 Show GitHub Exploit DB Packet Storm
196760 7.8 重要
Local
シマンテック - Norton Download Manager における任意の DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2016-6592 2017-02-10 14:02 2017-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 6.3 MEDIUM
Network
- - In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), da… New CWE-282
 Improper Ownership Management
CVE-2026-40214 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
292 7.4 HIGH
Network
- - OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless… New CWE-863
 Incorrect Authorization
CVE-2026-40213 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
293 7.4 HIGH
Local
- - Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directo… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-34354 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
294 - - - lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detection logic incorrectly identifies escaped quote characters by o… New - CVE-2026-29975 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
295 - - - An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan o… New - CVE-2026-29974 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
296 8.6 HIGH
Network
- - Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows un… New CWE-200
CWE-497
Information Exposure
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-42047 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
297 9.6 CRITICAL
Network
- - Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo… New CWE-200
CWE-212
Information Exposure
 Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-42880 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
298 7.3 HIGH
Network
- - This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Due to t… New CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-6411 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
299 8.8 HIGH
Network
- - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution envir… New CWE-78
CWE-94
CWE-250
CWE-284
CWE-693
OS Command 
Code Injection
 Execution with Unnecessary Privileges
Improper Access Control
 Protection Mechanism Failure
CVE-2026-41900 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
300 5.1 MEDIUM
Network
- - wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting… New CWE-79
Cross-site Scripting
CVE-2026-42150 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm