Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197561 6.5 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud における認証情報を読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-5950 2017-02-22 11:25 2016-06-29 Show GitHub Exploit DB Packet Storm
197562 4.3 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud における重要なユーザデータを取得される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-5949 2017-02-22 11:25 2016-10-12 Show GitHub Exploit DB Packet Storm
197563 5.4 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5948 2017-02-22 11:25 2016-06-29 Show GitHub Exploit DB Packet Storm
197564 7.8 重要
Local 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるユーザの認証情報を読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-9739 2017-02-22 11:09 2016-12-1 Show GitHub Exploit DB Packet Storm
197565 6.1 警告
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9704 2017-02-22 11:09 2016-12-1 Show GitHub Exploit DB Packet Storm
197566 2.4 低
Physics 		IBM - IBM Security Identity Manager 仮想アプライアンスにおける重要な情報を取得される脆弱性 CWE-384
セッションの固定化 		CVE-2016-9703 2017-02-22 11:09 2016-12-1 Show GitHub Exploit DB Packet Storm
197567 3.7 低
Network 		IBM - IBM Security Access Manager における情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-3045 2017-02-22 11:07 2016-12-8 Show GitHub Exploit DB Packet Storm
197568 4 警告
Local 		IBM - IBM Security Key Lifecycle Manager におけるローカルに保存された Web ページを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-6097 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
197569 6.1 警告
Network 		IBM - IBM Security Key Lifecycle Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6096 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
197570 4.3 警告
Network 		IBM - IBM Security Key Lifecycle Manager における環境などに関する重要な情報を含むエラーメッセージを出力される脆弱性 CWE-200
情報漏えい 		CVE-2016-6094 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 5.5 MEDIUM
Local 		- - Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_MSP::loop, AP_MSP, AP_MSP.cpp c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-51394 2026-05-14 03:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1162 5.0 MEDIUM
Network 		- - mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41195 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1163 - - - django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified requ… CWE-22
CWE-26
Path Traversal
 Path Traversal: '/dir/../filename' 		CVE-2026-42196 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1164 7.5 HIGH
Network 		- - Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-f… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-44302 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1165 - - - Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and th… CWE-22
Path Traversal 		CVE-2026-44307 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1166 5.3 MEDIUM
Network 		- - GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. Th… CWE-284
CWE-639
Improper Access Control
 Authorization Bypass Through User-Controlled Key 		CVE-2026-44341 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1167 - - - Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipelines (PostCSS, Babel, TailwindCSS), Hugo invoked the configured Node tools with… CWE-22
Path Traversal 		CVE-2026-44301 2026-05-14 03:14 2026-05-13 Show GitHub Exploit DB Packet Storm
1168 6.1 MEDIUM
Network 		- - Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentio… CWE-79
Cross-site Scripting 		CVE-2026-44245 2026-05-14 03:14 2026-05-13 Show GitHub Exploit DB Packet Storm
1169 6.3 MEDIUM
Network 		- - A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users… CWE-20
 Improper Input Validation  		CVE-2026-2695 2026-05-14 03:10 2026-05-14 Show GitHub Exploit DB Packet Storm
1170 7.5 HIGH
Network 		phpoffice phpspreadsheet PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the SpreadsheetML XML reader (Reader\Xml) does not validate the ss:I… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-40863 2026-05-14 03:01 2026-05-13 Show GitHub Exploit DB Packet Storm