Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196791 7.5 重要
Network
Squid-cache.org - Squid HTTP Proxy の Collapsed Forwarding 機能におけるプライベートな応答を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-10003 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
196792 7.5 重要
Network
Squid-cache.org
Debian
- Squid HTTP Proxy におけるクライアント固有の Cookie データ漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-10002 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
196793 9.8 緊急
Network
The Perl Foundation - Perl の VDir::MapPathA および VDir::MapPathW 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2015-8608 2017-03-15 18:03 2015-11-28 Show GitHub Exploit DB Packet Storm
196794 7.2 重要
Network
IBM - IBM Tivoli Storage Manager Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8998 2017-03-15 17:52 2016-10-25 Show GitHub Exploit DB Packet Storm
196795 6.1 警告
Network
IBM - Ephox WebRadar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8922 2017-03-15 17:52 2016-11-18 Show GitHub Exploit DB Packet Storm
196796 9.8 緊急
Network
PEAR - PEAR HTML_AJAX の PHP Serializer における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2017-5677 2017-03-15 17:49 2017-02-2 Show GitHub Exploit DB Packet Storm
196797 7.5 重要
Network
PEAR - PEAR Base System のインストーラのダウンロードユーティリティクラスの PECL におけるファイルを上書きされる脆弱性 CWE-254
セキュリティ機能
CVE-2017-5630 2017-03-15 17:49 2017-01-26 Show GitHub Exploit DB Packet Storm
196798 5.9 警告
Network
Square, Inc. - OkHttp における証明書ピン留めを回避される脆弱性 CWE-295
不正な証明書検証
CVE-2016-2402 2017-03-15 17:34 2016-02-11 Show GitHub Exploit DB Packet Storm
196799 7.5 重要
Network
minitar - RubyGems minitar および archive-tar-minitar におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10173 2017-03-15 17:15 2016-11-14 Show GitHub Exploit DB Packet Storm
196800 7.5 重要
Network
SAP - Windows 上で稼動する SAP GUI の SAPlpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-10079 2017-03-15 17:09 2016-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1121 8.1 HIGH
Network
- - MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing Authent… Update CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44400 2026-05-14 00:30 2026-05-9 Show GitHub Exploit DB Packet Storm
1122 8.1 HIGH
Network
- - SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json fi… Update CWE-22
Path Traversal
CVE-2026-7807 2026-05-14 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
1123 8.8 HIGH
Network
- - CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager con… Update CWE-59
Link Following
CVE-2021-47949 2026-05-14 00:29 2026-05-10 Show GitHub Exploit DB Packet Storm
1124 6.1 MEDIUM
Network
- - Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the file parameter. Atta… Update CWE-79
Cross-site Scripting
CVE-2022-50957 2026-05-14 00:29 2026-05-10 Show GitHub Exploit DB Packet Storm
1125 5.4 MEDIUM
Network
- - Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via `POST /ciphers/import-organiz… Update CWE-862
 Missing Authorization
CVE-2026-43638 2026-05-14 00:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1126 8.0 HIGH
Network
- - Bitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a provider service user to add an arbitrary organization to their provider via `POST /providers/{provide… Update CWE-862
 Missing Authorization
CVE-2026-43639 2026-05-14 00:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1127 8.1 HIGH
Network
- - Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenticated user with SCIM management … Update CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-43640 2026-05-14 00:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1128 6.5 MEDIUM
Adjacent
- - barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the options pointer remains within … Update CWE-125
Out-of-bounds Read
CVE-2026-34960 2026-05-14 00:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1129 6.1 MEDIUM
Network
- - Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can injec… Update CWE-79
Cross-site Scripting
CVE-2022-50943 2026-05-14 00:27 2026-05-10 Show GitHub Exploit DB Packet Storm
1130 8.8 HIGH
Network
- - SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploi… New CWE-94
Code Injection
CVE-2026-8429 2026-05-14 00:26 2026-05-13 Show GitHub Exploit DB Packet Storm