Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196971 7.3 重要
Network 		Schneider Electric - Schneider Electric Wonderware Historian における Historian データベースに侵入される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-5155 2017-04-4 18:01 2017-01-24 Show GitHub Exploit DB Packet Storm
196972 7 重要
Local 		Schneider Electric - Schneider Electric Unity PRO の PLC シミュレータにおける悪意のあるコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-8354 2017-04-4 18:01 2016-10-14 Show GitHub Exploit DB Packet Storm
196973 10 緊急
Network 		Schneider Electric - 複数の Schneider Electric ConneXium ファイアウォール製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-8352 2017-04-4 18:01 2016-11-1 Show GitHub Exploit DB Packet Storm
196974 8.8 重要
Network 		NetApp - NetApp Data ONTAP における共有制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5374 2017-04-4 17:43 2016-06-9 Show GitHub Exploit DB Packet Storm
196975 7.5 重要
Network 		Debian
Apache Software Foundation		 - Apache Tomcat サーブレットおよび JSP エンジンの HTTPS リクエストの処理におけるサービス運用妨害 (DoS) の脆弱性 CWE-19
データ処理 		CVE-2017-6056 2017-04-4 17:42 2017-01-12 Show GitHub Exploit DB Packet Storm
196976 6.8 警告
Network 		Tesla, Inc. - Tesla Model S のゲートウェイECU におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-9337 2017-04-4 17:42 2016-12-6 Show GitHub Exploit DB Packet Storm
196977 6.4 警告
Network 		OSIsoft - OSIsoft PI Web API における適切な権限なしで PI システムにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8353 2017-04-4 17:41 2016-10-13 Show GitHub Exploit DB Packet Storm
196978 7.5 重要
Network 		シーメンス - Siemens SICAM 用の SM-2558 拡張モジュールの ETA4 ファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-19
データ処理 		CVE-2016-7987 2017-04-4 17:41 2016-10-25 Show GitHub Exploit DB Packet Storm
196979 9.8 緊急
Network 		Schneider Electric - Schneider Electric の IONXXXX シリーズおよび PM5XXX シリーズのパワーメータにおけるデバイス管理ポータルにアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-5815 2017-04-4 16:55 2016-09-12 Show GitHub Exploit DB Packet Storm
196980 8.8 重要
Network 		Schneider Electric - 複数の Schneider Electric の IONXXXX シリーズおよび PM5XXX シリーズのパワーメータにおける非認証の設定変更を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-5809 2017-04-4 16:55 2016-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 3.0 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… CWE-522
 Insufficiently Protected Credentials 		CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1362 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1363 2.3 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1364 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1365 7.5 HIGH
Network 		libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
1366 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … CWE-779
 Logging of Excessive Data 		CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1367 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform … CWE-779
 Logging of Excessive Data 		CVE-2026-20210 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1368 8.6 HIGH
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.… CWE-20
 Improper Input Validation  		CVE-2026-20224 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1369 5.3 MEDIUM
Network 		- - Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Sym… CWE-749
 Exposed Dangerous Method or Function 		CVE-2026-33584 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1370 3.8 LOW
Physics 		- - Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.… CWE-233
 Improper Handling of Parameters 		CVE-2026-33585 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm