Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197221 8.8 重要
Local 		Firejail project - Firejail におけるサンドボックスエスケープ攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5180 2017-03-31 16:50 2017-01-7 Show GitHub Exploit DB Packet Storm
197222 7.5 重要
Network 		The WebKitGTK+ Team - WebKitGTK+ における TLS 認証の検証前にセキュアな HTTP リクエストを表示される脆弱性 CWE-295
不正な証明書検証 		CVE-2015-2330 2017-03-31 16:47 2015-12-28 Show GitHub Exploit DB Packet Storm
197223 6.3 警告
Physics 		Canonical - Ubuntu の network-manager-applet における lightdm ユーザとしてローカルファイルにアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-6590 2017-03-31 16:46 2017-03-7 Show GitHub Exploit DB Packet Storm
197224 8.8 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるセッションをハイジャックされる脆弱性 CWE-613
不適切なセッション期限 		CVE-2017-6529 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197225 8.1 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるパスワードを平文で保存される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-6528 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197226 7.5 重要
Network 		dnaTools, Inc. - dnaTools dnaLIMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-6527 2017-03-31 16:46 2017-03-8 Show GitHub Exploit DB Packet Storm
197227 9.8 緊急
Network 		dnaTools, Inc. - dnaTools dnaLIMS における非認証のコマンドを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6526 2017-03-31 16:45 2017-03-8 Show GitHub Exploit DB Packet Storm
197228 7.8 重要
Local 		トレンドマイクロ - Trend Micro Endpoint Sensor における DLL ハイジャックの脆弱性 CWE-426
信頼性のない検索パス 		CVE-2017-6798 2017-03-31 16:42 2017-03-7 Show GitHub Exploit DB Packet Storm
197229 5.9 警告
Network 		DBD::mysql project - Perl 用 DBD::mysql モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-1249 2017-03-31 16:40 2016-11-15 Show GitHub Exploit DB Packet Storm
197230 5.5 警告
Local 		partclone project - partclone の partclone.chkimg におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-6596 2017-03-31 16:35 2017-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1461 - - - An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution. CWE-252
 Unchecked Return Value 		CVE-2025-29938 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1462 - - - A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash CWE-120
Classic Buffer Overflow 		CVE-2025-29944 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1463 - - - Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability. CWE-908
 Use of Uninitialized Resource 		CVE-2025-48513 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1464 - - - Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent… CWE-276
Incorrect Default Permissions  		CVE-2025-48516 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1465 - - - Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat… CWE-274
 Improper Handling of Insufficient Privileges 		CVE-2025-54511 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1466 - - - Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. CWE-787
 Out-of-bounds Write 		CVE-2025-54517 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1467 - - - Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-66660 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1468 - - - Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,… CWE-125
Out-of-bounds Read 		CVE-2025-66664 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1469 - - - Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potent… CWE-459
 Incomplete Cleanup 		CVE-2026-0427 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1470 - - - Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-0428 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm