Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197151 6.1 警告
Network
WSO2 - WSO2 Carbon におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4316 2017-03-6 16:32 2016-08-12 Show GitHub Exploit DB Packet Storm
197152 5.7 警告
Network
WSO2 - WSO2 Carbon におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4315 2017-03-6 16:32 2016-08-12 Show GitHub Exploit DB Packet Storm
197153 4.9 警告
Network
WSO2 - WSO2 Carbon の LogViewer Admin Service におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-4314 2017-03-6 16:32 2016-08-12 Show GitHub Exploit DB Packet Storm
197154 7.5 重要
Network
suckless.org
Fedora Project
- slock における画面ロックを回避される脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-6866 2017-03-6 16:31 2016-08-30 Show GitHub Exploit DB Packet Storm
197155 5.5 警告
Local
Libav - libav の resample.c の the ff_audio_resample 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-6832 2017-03-6 16:31 2016-08-17 Show GitHub Exploit DB Packet Storm
197156 7.8 重要
Local
Nagios Enterprises, LLC - Nagios における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10089 2017-03-6 16:29 2016-12-30 Show GitHub Exploit DB Packet Storm
197157 7.5 重要
Network
FreeBSD - FreeBSD の telnetd サービスにおけるログインの引数を挿入される脆弱性 CWE-287
不適切な認証
CVE-2016-1888 2017-03-6 16:27 2016-12-6 Show GitHub Exploit DB Packet Storm
197158 7.8 重要
Local
FreeBSD - FreeBSD の Linux 互換レイヤの issetugid システムコールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1883 2017-03-6 16:27 2016-01-27 Show GitHub Exploit DB Packet Storm
197159 7.8 重要
Local
FreeBSD - FreeBSD のカーネルの Linux 互換レイヤにおけるカーネルメモリの一部を読み込まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1880 2017-03-6 16:27 2016-01-14 Show GitHub Exploit DB Packet Storm
197160 5.5 警告
Local
Artifex Software - MuPDF の fitz/pixmap.c の fz_subsample_pixmap 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-125
境界外読み取り
CVE-2017-5896 2017-03-6 15:58 2017-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 5.8 MEDIUM
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, import, or async key… New CWE-693
 Protection Mechanism Failure
CVE-2026-44003 2026-05-15 00:22 2026-05-14 Show GitHub Exploit DB Packet Storm
362 7.5 HIGH
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buffer.alloc() with an arbitrary size to allocate memory directly on the host heap. Because Buffer.alloc is a sy… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44004 2026-05-15 00:22 2026-05-14 Show GitHub Exploit DB Packet Storm
363 10.0 CRITICAL
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0. New CWE-94
Code Injection
CVE-2026-44006 2026-05-15 00:19 2026-05-14 Show GitHub Exploit DB Packet Storm
364 9.1 CRITICAL
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer VM's require config… New CWE-284
Improper Access Control
CVE-2026-44007 2026-05-15 00:18 2026-05-14 Show GitHub Exploit DB Packet Storm
365 9.8 CRITICAL
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array pr… New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-44008 2026-05-15 00:17 2026-05-14 Show GitHub Exploit DB Packet Storm
366 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w…
Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally. New CWE-126
 Buffer Over-read
CVE-2026-34336 2026-05-15 00:17 2026-05-13 Show GitHub Exploit DB Packet Storm
367 9.8 CRITICAL
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2. New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-44009 2026-05-15 00:17 2026-05-14 Show GitHub Exploit DB Packet Storm
368 7.3 HIGH
Network
- - YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. Whe… New CWE-124
Buffer Underflow
CVE-2026-5089 2026-05-15 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
369 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and th… Update CWE-787
 Out-of-bounds Write
CVE-2026-43500 2026-05-15 00:16 2026-05-11 Show GitHub Exploit DB Packet Storm
370 6.8 MEDIUM
Physics
- - U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control me… New CWE-284
Improper Access Control
CVE-2026-36738 2026-05-15 00:16 2026-05-14 Show GitHub Exploit DB Packet Storm