Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197041 7.5 重要
Network 		Magento, Inc. - Magento の Framework/Encryption/Crypt.php の __construct 関数における暗号保護メカニズムを破られる脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2016-6485 2017-03-31 16:52 2016-07-19 Show GitHub Exploit DB Packet Storm
197042 7.5 重要
Network 		Orange - Livebox Sagemcom デバイスにおけるシステムの応答停止をレンダリングされる脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6552 2017-03-31 16:51 2017-03-9 Show GitHub Exploit DB Packet Storm
197043 8.8 重要
Local 		Firejail project - Firejail におけるサンドボックスのエスケープ攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5940 2017-03-31 16:50 2017-01-15 Show GitHub Exploit DB Packet Storm
197044 8.8 重要
Local 		Firejail project - Firejail におけるサンドボックスエスケープ攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5180 2017-03-31 16:50 2017-01-7 Show GitHub Exploit DB Packet Storm
197045 7.5 重要
Network 		The WebKitGTK+ Team - WebKitGTK+ における TLS 認証の検証前にセキュアな HTTP リクエストを表示される脆弱性 CWE-295
不正な証明書検証 		CVE-2015-2330 2017-03-31 16:47 2015-12-28 Show GitHub Exploit DB Packet Storm
197046 6.3 警告
Physics 		Canonical - Ubuntu の network-manager-applet における lightdm ユーザとしてローカルファイルにアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-6590 2017-03-31 16:46 2017-03-7 Show GitHub Exploit DB Packet Storm
197047 8.8 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるセッションをハイジャックされる脆弱性 CWE-613
不適切なセッション期限 		CVE-2017-6529 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197048 8.1 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるパスワードを平文で保存される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-6528 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197049 7.5 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-6527 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197050 9.8 緊急
Network 		dnaTools, Inc. - dnaTools dnaLIMS における非認証のコマンドを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6526 2017-03-31 16:45 2017-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 - - - An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability. CWE-125
Out-of-bounds Read 		CVE-2025-0044 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1362 - - - An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiali… CWE-787
 Out-of-bounds Write 		CVE-2025-29935 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1363 - - - Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing priv… CWE-20
 Improper Input Validation  		CVE-2025-29936 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1364 - - - An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or con… CWE-125
Out-of-bounds Read 		CVE-2025-29937 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1365 - - - An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution. CWE-252
 Unchecked Return Value 		CVE-2025-29938 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1366 - - - A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash CWE-120
Classic Buffer Overflow 		CVE-2025-29944 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1367 - - - Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability. CWE-908
 Use of Uninitialized Resource 		CVE-2025-48513 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1368 - - - Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent… CWE-276
Incorrect Default Permissions  		CVE-2025-48516 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1369 - - - Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat… CWE-274
 Improper Handling of Insufficient Privileges 		CVE-2025-54511 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1370 - - - Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. CWE-787
 Out-of-bounds Write 		CVE-2025-54517 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm