Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197551 7.8 重要
Local 		Hancom Inc. - Hancom Office 2014 におけるアプリケーションのコンテキスト内でコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-4292 2017-01-23 10:41 2016-08-4 Show GitHub Exploit DB Packet Storm
197552 7.8 重要
Local 		Hancom Inc. - Hancom Office 2014 における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-4291 2017-01-23 10:41 2016-08-4 Show GitHub Exploit DB Packet Storm
197553 7.8 重要
Local 		Hancom Inc. - Hancom Office 2014 におけるアプリケーションのコンテキスト内でコードを実行される脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-4290 2017-01-23 10:41 2016-08-4 Show GitHub Exploit DB Packet Storm
197554 5.5 警告
Local 		カスペルスキー - Kaspersky Internet Security の KL1 ドライバの IOCTL 処理機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-4307 2017-01-23 10:40 2016-08-26 Show GitHub Exploit DB Packet Storm
197555 5.5 警告
Local 		カスペルスキー - Kaspersky Internet Security の KLDISK ドライバの複数の IOCTL ハンドラにおける情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2016-4306 2017-01-23 10:40 2016-08-26 Show GitHub Exploit DB Packet Storm
197556 5.5 警告
Local 		カスペルスキー - Kaspersky Internet Security の KLIF ドライバのシステムコールのフィルタリング機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-4305 2017-01-23 10:40 2016-08-26 Show GitHub Exploit DB Packet Storm
197557 5.5 警告
Local 		カスペルスキー - Kaspersky Internet Security の KLIF ドライバのシステムコールのフィルタリング機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-4304 2017-01-23 10:40 2016-08-26 Show GitHub Exploit DB Packet Storm
197558 6.1 警告
Network 		Google - Google Chrome の Blink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5226 2017-01-20 14:58 2016-12-1 Show GitHub Exploit DB Packet Storm
197559 4.3 警告
Network 		Google - Google Chrome の Blink の SVG フィルタにおける同一生成元ポリシーを回避される脆弱性 CWE-189
数値処理の問題 		CVE-2016-5224 2017-01-20 14:58 2016-12-1 Show GitHub Exploit DB Packet Storm
197560 6.5 警告
Network 		Google - Google Chrome の PDFium における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-5223 2017-01-20 14:58 2016-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 6.5 MEDIUM
Network 		- - The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is e… New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2025-66171 2026-05-9 16:16 2026-05-8 Show GitHub Exploit DB Packet Storm
142 6.5 MEDIUM
Network 		- - The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plug… New CWE-863
 Incorrect Authorization 		CVE-2025-66170 2026-05-9 16:16 2026-05-8 Show GitHub Exploit DB Packet Storm
143 - - - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encountered a crash during resource cleanup when… New - CVE-2026-43473 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
144 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps For a `gotox rX` instruction the rX register should be marked as used in the… New - CVE-2026-43321 2026-05-9 15:16 2026-05-8 Show GitHub Exploit DB Packet Storm
145 9.1 CRITICAL
Network 		- - auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the … New CWE-287
Improper Authentication 		CVE-2026-42560 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
146 - - - Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code e… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-42311 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
147 - - - Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42310 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
148 - - - Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polyg… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-42309 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
149 - - - Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42308 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
150 - - - A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized… New CWE-862
 Missing Authorization 		CVE-2025-15634 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm