Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197681 10 緊急
Network 		Radisys - Radisys MRF Web Panel の /swms/ms.cgi における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2016-10043 2017-04-4 16:16 2016-12-26 Show GitHub Exploit DB Packet Storm
197682 5.3 警告
Network 		Visonic - Visonic PowerLink2 における情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-5813 2017-04-4 16:07 2016-12-13 Show GitHub Exploit DB Packet Storm
197683 7.8 重要
Local 		Delta Electronics - 複数の Delta Electronics 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-5805 2017-04-4 15:56 2016-12-13 Show GitHub Exploit DB Packet Storm
197684 7.8 重要
Local 		Delta Electronics - 複数の Delta Electronics 製品における悪意のあるファイルを読み込まれる脆弱性 CWE-787
境界外書き込み 		CVE-2016-5802 2017-04-4 15:56 2016-12-13 Show GitHub Exploit DB Packet Storm
197685 6.5 警告
Adjacent 		ASUSTeK Computer Inc. - ASUS RT-N56U Wireless Router のファームウェアにおける脆弱性 CWE-noinfo
情報不足 		CVE-2017-5632 2017-04-4 15:54 2017-01-29 Show GitHub Exploit DB Packet Storm
197686 7.2 重要
Network 		ソフォス - Sophos Web Appliance Remote / Secure Web Gateway サーバの Web 管理インターフェースにおけるリモートコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-9554 2017-04-4 15:38 2016-11-22 Show GitHub Exploit DB Packet Storm
197687 7.8 重要
Local 		CA Technologies - 複数の CA 製品で使用される CA Common Services の casrvc プログラムにおける任意のファイルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9795 2017-04-4 15:30 2016-12-2 Show GitHub Exploit DB Packet Storm
197688 8.8 重要
Network 		マカフィー - McAfee Virus Scan Enterprise for Linux に複数の脆弱性 CWE-113
CWE-200
CWE-290
CWE-302
CWE-347
CWE-352
CWE-75
CWE-79
CWE-89
CWE-94
CVE-2016-8016
CVE-2016-8017
CVE-2016-8018
CVE-2016-8019
CVE-2016-8020
CVE-2016-8021
CVE-2016-8022
CVE-2016-8023
CVE-2016-8024
CVE-2016-8025 		2017-04-4 15:18 2016-12-12 Show GitHub Exploit DB Packet Storm
197689 8.6 重要
Network 		Locus Energy - 複数の Locus Energy LGate 製品における脆弱性 CWE-20
不適切な入力確認 		CVE-2016-5782 2017-04-4 15:10 2016-12-6 Show GitHub Exploit DB Packet Storm
197690 7.2 重要
Network 		XOOPS - XOOPS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-7290 2017-04-4 11:31 2017-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2151 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerability is caused by incorrect escaping of a saved filter's owner, allowing an att… CWE-79
Cross-site Scripting 		CVE-2026-40607 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
2152 8.8 HIGH
Network 		litellm litellm LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restri… CWE-863
 Incorrect Authorization 		CVE-2026-47102 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
2153 8.8 HIGH
Network 		litellm litellm LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored with… CWE-863
 Incorrect Authorization 		CVE-2026-47101 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
2154 9.8 CRITICAL
Network 		drupal drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.… CWE-89
SQL Injection 		CVE-2026-9082 2026-05-23 04:38 2026-05-21 Show GitHub Exploit DB Packet Storm
2155 7.5 HIGH
Network 		apache cxf The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilities, if untrusted use… CWE-20
 Improper Input Validation  		CVE-2026-44417 2026-05-23 04:29 2026-05-22 Show GitHub Exploit DB Packet Storm
2156 5.4 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to g… CWE-863
 Incorrect Authorization 		CVE-2026-28735 2026-05-23 04:28 2026-05-23 Show GitHub Exploit DB Packet Storm
2157 6.4 MEDIUM
Network 		concretecms concrete_cms For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 (suspended, banned, terminated employee) can still authenticate via OAuth and r… CWE-1287
 Improper Validation of Specified Type of Input 		CVE-2026-7887 2026-05-23 04:21 2026-05-22 Show GitHub Exploit DB Packet Storm
2158 - - - authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, authenticated non-admin users with at least one OAuth2 access token can retrieve the c… CWE-200
CWE-863
Information Exposure
 Incorrect Authorization 		CVE-2026-40166 2026-05-23 04:19 2026-05-23 Show GitHub Exploit DB Packet Storm
2159 8.1 HIGH
Network 		- - authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, the PATCH /api/v3/core/users/{pk}/ API allows a caller with change_user on a target us… CWE-269
 Improper Privilege Management 		CVE-2026-40172 2026-05-23 04:19 2026-05-23 Show GitHub Exploit DB Packet Storm
2160 4.3 MEDIUM
Network 		concretecms concrete_cms Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter which can lead to file permission bypass. The `AddMessage` and `UpdateMessage` conversation … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7886 2026-05-23 04:19 2026-05-22 Show GitHub Exploit DB Packet Storm