Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197661 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-2934 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197662 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-2933 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197663 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player の ActionScript MovieClip クラスにおける任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-2932 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197664 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-2931 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197665 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-2930 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197666 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-2928 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197667 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-2927 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197668 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-2926 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197669 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player の JPEG XR コーデックにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-2925 2017-01-13 16:50 2017-01-10 Show GitHub Exploit DB Packet Storm
197670 5.9 警告
Network
F5 Networks - F5 BIG-IP システムのバーチャルサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-5024 2017-01-13 16:47 2016-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 2.9 LOW
Local
- - In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. New CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-44928 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
162 - - - YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP … New CWE-22
Path Traversal
CVE-2026-41493 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
163 4.7 MEDIUM
Network
- - go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smar… New CWE-522
 Insufficiently Protected Credentials
CVE-2026-41506 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
164 9.8 CRITICAL
Network
- - math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body without sanitization. Th… New CWE-94
Code Injection
CVE-2026-41507 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
165 - - - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Se… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41423 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
166 - - - Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerabilit… New CWE-74
Injection
CVE-2025-67486 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
167 - - - Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email addresses match. T… New CWE-287
Improper Authentication
CVE-2026-41574 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
168 7.5 HIGH
Network
coredns.io coredns CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport w… New CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-33190 2026-05-9 01:01 2026-05-6 Show GitHub Exploit DB Packet Storm
169 7.5 HIGH
Network
coredns.io coredns CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The l… New CWE-863
 Incorrect Authorization
CVE-2026-33489 2026-05-9 01:00 2026-05-6 Show GitHub Exploit DB Packet Storm
170 9.8 CRITICAL
Network
coredns.io coredns CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server check… New CWE-287
Improper Authentication
CVE-2026-35579 2026-05-9 00:58 2026-05-6 Show GitHub Exploit DB Packet Storm