Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197641 9.8 緊急
Network
The PHP Group - PHP の ext/curl/curl_file.c の CURLFile の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9137 2017-01-16 17:03 2016-10-13 Show GitHub Exploit DB Packet Storm
197642 9.8 緊急
Network
LibGD project - PHP で使用される GD Graphics Library の gd_io_dp.c の dynamicGetbuf 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-8670 2017-01-16 17:03 2016-10-12 Show GitHub Exploit DB Packet Storm
197643 9.8 緊急
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の get_icu_disp_value_src_php 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9912 2017-01-16 17:03 2014-06-24 Show GitHub Exploit DB Packet Storm
197644 7.8 重要
Local
OpenBSD - OpenSSH の sshd の共有メモリマネージャにおける権限を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-10012 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
197645 5.5 警告
Local
OpenBSD - OpenSSH の sshd の authfile.c における重要な秘密鍵の情報を取得される脆弱性 CWE-320
鍵管理のエラー
CVE-2016-10011 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
197646 7 重要
Local
OpenBSD - OpenSSH の sshd における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10010 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
197647 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9444 2017-01-16 11:13 2016-11-18 Show GitHub Exploit DB Packet Storm
197648 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9147 2017-01-16 11:13 2016-11-3 Show GitHub Exploit DB Packet Storm
197649 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9131 2017-01-16 11:13 2016-10-31 Show GitHub Exploit DB Packet Storm
197650 9.8 緊急
Network
aWebSupport - Joomla! 用 aWeb Cart Watching System for Virtuemart エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-10114 2017-01-16 10:26 2016-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 6.1 MEDIUM
Network
frappe erpnext ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject malicious JavaScript co… Update CWE-79
Cross-site Scripting
CVE-2026-38432 2026-05-9 02:05 2026-05-6 Show GitHub Exploit DB Packet Storm
272 7.7 HIGH
Network
istio istio Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal se… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41413 2026-05-9 02:03 2026-05-7 Show GitHub Exploit DB Packet Storm
273 9.8 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-42217 2026-05-9 02:01 2026-05-7 Show GitHub Exploit DB Packet Storm
274 8.8 HIGH
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-41142 2026-05-9 02:00 2026-05-7 Show GitHub Exploit DB Packet Storm
275 9.8 CRITICAL
Network
hitachi virtual_storage_one_block OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform On… New CWE-78
OS Command 
CVE-2025-9661 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
276 7.8 HIGH
Local
zte zxcloud_irai ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privi… New CWE-427
 Uncontrolled Search Path Element
CVE-2026-44406 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
277 9.1 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… New CWE-125
Out-of-bounds Read
CVE-2026-42216 2026-05-9 01:56 2026-05-7 Show GitHub Exploit DB Packet Storm
278 7.8 HIGH
Local
libreoffice libreoffice Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2… New CWE-787
 Out-of-bounds Write
CVE-2026-4430 2026-05-9 01:48 2026-05-7 Show GitHub Exploit DB Packet Storm
279 - - - ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated remote attacker to pe… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44499 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
280 - - - Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… New CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-43967 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm