Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196811 7.5 重要
Network
Debian
libevent_project
- libevent の evdns.c 内の search_make_new 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-10197 2017-04-11 19:52 2016-07-4 Show GitHub Exploit DB Packet Storm
196812 7.5 重要
Network
Debian
libevent_project
- libevent の evutil.c 内の evutil_parse_sockaddr_port 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-10196 2017-04-11 19:51 2016-07-4 Show GitHub Exploit DB Packet Storm
196813 6.5 警告
Local
virglrenderer project - virglrenderer の vrend_decode.c 内の vrend_renderer_context_create_internal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-10163 2017-04-11 19:51 2016-12-27 Show GitHub Exploit DB Packet Storm
196814 7.8 重要
Local
68k.org - audiofile の FileHandle.cpp の readValue 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-6828 2017-04-11 19:50 2017-02-20 Show GitHub Exploit DB Packet Storm
196815 7.8 重要
Local
68k.org - audiofile の MSADPCM.cpp の MSADPCM::initializeCoefficients 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-6827 2017-04-11 19:50 2017-02-20 Show GitHub Exploit DB Packet Storm
196816 9.8 緊急
Network
AlienVault - AlienVault OSSIM および USM の session.inc のログチェック機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-7955 2017-04-11 19:40 2016-09-9 Show GitHub Exploit DB Packet Storm
196817 5.4 警告
Network
Fabrice Bellard - QEMU の hw/usb/hcd-ohci.c の ohci_service_ed_list 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-6505 2017-04-11 19:32 2017-02-21 Show GitHub Exploit DB Packet Storm
196818 6.5 警告
Local
Fabrice Bellard - QEMU の hw/display/virtio-gpu-3d.c の virgl_cmd_resource_unref 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5857 2017-04-11 19:32 2017-01-17 Show GitHub Exploit DB Packet Storm
196819 6.5 警告
Local
Fabrice Bellard - QEMU の hw/scsi/megasas.c の megasas_handle_dcmd 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5856 2017-04-11 19:32 2017-01-17 Show GitHub Exploit DB Packet Storm
196820 6.5 警告
Local
Fabrice Bellard - QEMU の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5667 2017-04-11 19:32 2017-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1521 - - - Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, giv… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-44504 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
1522 9.1 CRITICAL
Network
- - Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, and com.ritense.val… CWE-94
Code Injection
CVE-2026-42555 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
1523 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabiliti… CWE-77
Command Injection
CVE-2026-44870 2026-05-15 03:13 2026-05-13 Show GitHub Exploit DB Packet Storm
1524 - - - Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Flowsint allows a user to create investigations, whic… CWE-79
Cross-site Scripting
CVE-2026-42159 2026-05-15 03:12 2026-05-15 Show GitHub Exploit DB Packet Storm
1525 - - - MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any remote attacker to … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42281 2026-05-15 03:12 2026-05-15 Show GitHub Exploit DB Packet Storm
1526 7.7 HIGH
Local
- - DevSpace is a client-only developer tool for cloud-native development with Kubernetes. Prior to 6.3.21, DevSpace's UI server WebSocket accepts connections from all origins by default, and therefore s… CWE-200
CWE-306
Information Exposure
Missing Authentication for Critical Function
CVE-2026-42283 2026-05-15 03:12 2026-05-15 Show GitHub Exploit DB Packet Storm
1527 9.1 CRITICAL
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side … CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-44694 2026-05-15 03:10 2026-05-9 Show GitHub Exploit DB Packet Storm
1528 4.3 MEDIUM
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MC… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-42282 2026-05-15 03:07 2026-05-9 Show GitHub Exploit DB Packet Storm
1529 7.5 HIGH
Network
russh_project
warpgate_project
russh
warpgate
Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authentication handler. A malici… CWE-770
CWE-789
 Allocation of Resources Without Limits or Throttling
 Memory Allocation with Excessive Size Value
CVE-2026-42189 2026-05-15 03:07 2026-05-9 Show GitHub Exploit DB Packet Storm
1530 5.3 MEDIUM
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming request… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-41495 2026-05-15 03:06 2026-05-9 Show GitHub Exploit DB Packet Storm