Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196851 7.5 重要
Network
openSUSE project
GraphicsMagick
- GraphicsMagick の coders/tiff.c の TIFFGetField 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7449 2017-02-23 13:56 2016-08-18 Show GitHub Exploit DB Packet Storm
196852 9.8 緊急
Network
openSUSE project
GraphicsMagick
- GraphicsMagick の EscapeParenthesis 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7447 2017-02-23 13:56 2016-09-8 Show GitHub Exploit DB Packet Storm
196853 9.8 緊急
Network
openSUSE project
GraphicsMagick
- GraphicsMagick の MVG および SVG レンダリングコードにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7446 2017-02-23 13:56 2016-09-8 Show GitHub Exploit DB Packet Storm
196854 9.8 緊急
Network
DNN - DotNetNuke のインストールウィザードにおけるアプリケーションを再インストールされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-2794 2017-02-23 11:39 2015-05-26 Show GitHub Exploit DB Packet Storm
196855 6.1 警告
Network
ZoneMinder - ZoneMinder における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5367 2017-02-23 11:12 2017-02-5 Show GitHub Exploit DB Packet Storm
196856 6.1 警告
Network
dotCMS - dotCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5877 2017-02-23 10:55 2017-02-6 Show GitHub Exploit DB Packet Storm
196857 5.4 警告
Network
dotCMS - dotCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5875 2017-02-23 10:55 2017-02-6 Show GitHub Exploit DB Packet Storm
196858 5.5 警告
Local
LibTIFF - LibTIFF の gif2tiff ツールの gif2tiff.c の readgifimage 関数におけるバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-5102 2017-02-23 10:49 2016-09-5 Show GitHub Exploit DB Packet Storm
196859 6.2 警告
Local
TalariaX Pte Ltd - SendQuick Entera および Avera デバイスにおける認証されていない SMS ログを要求される脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2017-5137 2017-02-22 18:12 2017-02-5 Show GitHub Exploit DB Packet Storm
196860 9.8 緊急
Network
TalariaX Pte Ltd - SendQuick Entera および Avera デバイスにおける複数のコマンドを挿入される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-10098 2017-02-22 18:12 2017-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 6.5 MEDIUM
Network
- - The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is e… New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2025-66171 2026-05-9 16:16 2026-05-8 Show GitHub Exploit DB Packet Storm
142 6.5 MEDIUM
Network
- - The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plug… New CWE-863
 Incorrect Authorization
CVE-2025-66170 2026-05-9 16:16 2026-05-8 Show GitHub Exploit DB Packet Storm
143 - - - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encountered a crash during resource cleanup when… New - CVE-2026-43473 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
144 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps For a `gotox rX` instruction the rX register should be marked as used in the… New - CVE-2026-43321 2026-05-9 15:16 2026-05-8 Show GitHub Exploit DB Packet Storm
145 9.1 CRITICAL
Network
- - auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the … New CWE-287
Improper Authentication
CVE-2026-42560 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
146 - - - Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code e… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write
CVE-2026-42311 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
147 - - - Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
148 - - - Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polyg… New CWE-122
Heap-based Buffer Overflow
CVE-2026-42309 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
149 - - - Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-42308 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
150 - - - A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized… New CWE-862
 Missing Authorization
CVE-2025-15634 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm