Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197261 8.5 重要
Network 		Smiths Medical - Smiths-Medical CADD-Solis Medication Safety Software におけるエンドポイント間の通信チャネルにアクセスされる脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2016-8358 2017-03-16 15:07 2016-12-1 Show GitHub Exploit DB Packet Storm
197262 9.9 緊急
Network 		Smiths Medical - Smiths-Medical CADD-Solis Medication Safety Software における SQL データベース上の権限を昇格される脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2016-8355 2017-03-16 15:07 2016-12-1 Show GitHub Exploit DB Packet Storm
197263 9.8 緊急
Network 		Sensio Labs - Symfony における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-2403 2017-03-16 15:04 2016-05-9 Show GitHub Exploit DB Packet Storm
197264 9.8 緊急
Network 		OpenText - OpenText Documentum D2 おける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-5586 2017-03-16 15:01 2017-02-15 Show GitHub Exploit DB Packet Storm
197265 7.8 重要
Local 		GPGTools - GPG Suite の Libmacgpg の installerHelper サブコンポーネントにおける root 権限で任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション 		CVE-2014-4677 2017-03-16 14:55 2014-06-26 Show GitHub Exploit DB Packet Storm
197266 9.8 緊急
Network 		php-gettext project - php-gettext における Eval インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2016-6175 2017-03-16 14:51 2016-07-25 Show GitHub Exploit DB Packet Storm
197267 9.8 緊急
Network 		アドビシステムズ - Adobe Flash Player の Primetime TVSDK API の機能におけるメモリを破損される脆弱性 CWE-119
バッファエラー 		CVE-2017-2998 2017-03-16 14:35 2017-03-14 Show GitHub Exploit DB Packet Storm
197268 9.8 緊急
Network 		アドビシステムズ - Adobe Flash Player の Primetime TVSDK におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-2997 2017-03-16 14:35 2017-03-14 Show GitHub Exploit DB Packet Storm
197269 7.8 重要
Local 		アドビシステムズ - Adobe Shockwave Player における安全でないライブラリを読み込まれる脆弱性 CWE-426
信頼性のない検索パス 		CVE-2017-2983 2017-03-16 14:35 2017-03-14 Show GitHub Exploit DB Packet Storm
197270 7.5 重要
Network 		マイクロソフト - Microsoft Windows の SMB Tree Connect Response パケットの処理にサービス運用妨害 (DoS) の脆弱性 - CVE-2017-0016 2017-03-16 14:18 2017-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 - - - Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the cli… CWE-266
 Incorrect Privilege Assignment 		CVE-2025-68420 2026-05-15 01:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1052 - - - Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elev… CWE-798
 Use of Hard-coded Credentials 		CVE-2025-68421 2026-05-15 01:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1053 - - - WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when opened by an authenticated user, results i… CWE-79
Cross-site Scripting 		CVE-2026-1630 2026-05-15 01:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1054 - - - An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_and_append()" when processing very large input strings on p… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-8295 2026-05-15 01:04 2026-05-14 Show GitHub Exploit DB Packet Storm
1055 - - - Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism. When an unauthenticated remote attacker attempts to log in using an incorrect username and p… CWE-79
Cross-site Scripting 		CVE-2026-21730 2026-05-15 01:04 2026-05-15 Show GitHub Exploit DB Packet Storm
1056 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. CWE-190
 Integer Overflow or Wraparound 		CVE-2026-35415 2026-05-15 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm
1057 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-35416 2026-05-15 00:55 2026-05-13 Show GitHub Exploit DB Packet Storm
1058 7.8 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. CWE-843
Type Confusion 		CVE-2026-35417 2026-05-15 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
1059 5.5 MEDIUM
Local 		m2team nanazip NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrolled recursion vulnerability exists in the UFS/UFS2 filesystem image parser in NanaZip. The function GetAllPat… CWE-674
 Uncontrolled Recursion 		CVE-2026-42445 2026-05-15 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
1060 7.0 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CWE-367
CWE-416
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Use After Free 		CVE-2026-35418 2026-05-15 00:53 2026-05-13 Show GitHub Exploit DB Packet Storm