Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197601 5.5 警告
Local
DELL EMC (旧 EMC Corporation) - EMC ScaleIO におけるサービス運用妨害 (DoS) の脆弱性 CWE-254
セキュリティ機能
CVE-2016-9868 2017-01-18 16:57 2016-12-6 Show GitHub Exploit DB Packet Storm
197602 8.8 重要
Local
DELL EMC (旧 EMC Corporation) - EMC ScaleIO における権限を root に昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9867 2017-01-18 16:57 2016-12-6 Show GitHub Exploit DB Packet Storm
197603 9.8 緊急
Network
トレイン・ジャパン株式会社 - Trane ComfortLink II ファームウェアの DSS サービスにおけるリモートでコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2015-2868 2017-01-18 16:50 2015-04-3 Show GitHub Exploit DB Packet Storm
197604 9.8 緊急
Network
トレイン・ジャパン株式会社 - Trane ComfortLink II SCC ファームウェアのサービスにおけるシステム制御権を取得される脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2015-2867 2017-01-18 16:50 2015-04-3 Show GitHub Exploit DB Packet Storm
197605 8.1 重要
Network
Memcached - Memcached の process_bin_sasl_auth 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-8706 2017-01-18 14:59 2016-10-31 Show GitHub Exploit DB Packet Storm
197606 9.8 緊急
Network
Memcached - Memcached の process_bin_update 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-8705 2017-01-18 14:59 2016-10-31 Show GitHub Exploit DB Packet Storm
197607 9.8 緊急
Network
Memcached - Memcached の process_bin_append_prepend 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-8704 2017-01-18 14:59 2016-10-31 Show GitHub Exploit DB Packet Storm
197608 6.3 警告
Network
CodeLathe - CodeLathe FileCloud にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6578 2017-01-18 11:50 2017-01-13 Show GitHub Exploit DB Packet Storm
197609 8.8 重要
Network
eClinicalWorks - eClinicalWorks Population Health の portalUserService.jsp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-4593 2017-01-18 10:40 2015-06-16 Show GitHub Exploit DB Packet Storm
197610 9.8 緊急
Network
eClinicalWorks - eClinicalWorks Population Health の portalUserService.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-4592 2017-01-18 10:40 2015-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 6.1 MEDIUM
Network
frappe erpnext ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject malicious JavaScript co… Update CWE-79
Cross-site Scripting
CVE-2026-38432 2026-05-9 02:05 2026-05-6 Show GitHub Exploit DB Packet Storm
272 7.7 HIGH
Network
istio istio Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal se… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41413 2026-05-9 02:03 2026-05-7 Show GitHub Exploit DB Packet Storm
273 9.8 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-42217 2026-05-9 02:01 2026-05-7 Show GitHub Exploit DB Packet Storm
274 8.8 HIGH
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-41142 2026-05-9 02:00 2026-05-7 Show GitHub Exploit DB Packet Storm
275 9.8 CRITICAL
Network
hitachi virtual_storage_one_block OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform On… New CWE-78
OS Command 
CVE-2025-9661 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
276 7.8 HIGH
Local
zte zxcloud_irai ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privi… New CWE-427
 Uncontrolled Search Path Element
CVE-2026-44406 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
277 9.1 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-125
Out-of-bounds Read
CVE-2026-42216 2026-05-9 01:56 2026-05-7 Show GitHub Exploit DB Packet Storm
278 7.8 HIGH
Local
libreoffice libreoffice Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2… New CWE-787
 Out-of-bounds Write
CVE-2026-4430 2026-05-9 01:48 2026-05-7 Show GitHub Exploit DB Packet Storm
279 - - - ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated remote attacker to pe… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44499 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
280 - - - Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… New CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-43967 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm