Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197721 6.5 警告
Local
Fabrice Bellard - Virtio GPU デバイスエミュレータサポートでビルドされた QEMU における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-9845 2017-01-12 15:26 2016-11-1 Show GitHub Exploit DB Packet Storm
197722 5.5 警告
Local
Fabrice Bellard - ColdFire Fast Ethernet Controller エミュレータサポートでビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-9776 2017-01-12 15:26 2016-11-29 Show GitHub Exploit DB Packet Storm
197723 7.8 重要
Local
マイクロソフト - Microsoft Word 2016 および SharePoint Enterprise Server 2016 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-0003 2017-01-12 11:28 2017-01-10 Show GitHub Exploit DB Packet Storm
197724 8.8 重要
Network
マイクロソフト - Microsoft Edge における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-0002 2017-01-12 11:28 2017-01-10 Show GitHub Exploit DB Packet Storm
197725 9.8 緊急
Network
クイックヒール・テクノロジーズ・ジャパン株式会社 - Mac OS X 上で稼動する Quick Heal の複数の製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5005 2017-01-11 17:59 2017-01-2 Show GitHub Exploit DB Packet Storm
197726 6.5 警告
Network
ネットギア - 複数の NETGEAR デバイス製品のファームウェアの scgi-bin/platform.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10106 2017-01-11 17:54 2016-11-28 Show GitHub Exploit DB Packet Storm
197727 9.8 緊急
Network
Piwigo - Piwigo の admin/plugin.php における情報漏えいの脆弱性 CWE-200
CWE-284
CVE-2016-10105 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
197728 7.2 重要
Network
Piwigo - Piwigo の admin/languages.php におけるファイルインクルージョン攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10085 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
197729 7.2 重要
Network
Piwigo - Piwigo の admin/batch_manager.php におけるファイルインクルージョン攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10084 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
197730 6.1 警告
Network
Piwigo - Piwigo の admin/plugin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-10083 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 - - - Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.5, processFuzzySearch in server/resource/resource_findallpaginated.go:1484 splits the user-supplied column parameter by comma and inte… New CWE-89
SQL Injection
CVE-2026-44349 2026-05-8 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
142 5.4 MEDIUM
Network
- - PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatted value differs from the original value. When a c… New CWE-79
Cross-site Scripting
CVE-2026-40296 2026-05-8 00:47 2026-05-7 Show GitHub Exploit DB Packet Storm
143 9.8 CRITICAL
Network
- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell comma… Update CWE-78
OS Command 
CVE-2026-42076 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
144 5.2 MEDIUM
Local
- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all Ja… Update CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-42077 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
145 5.0 MEDIUM
Network
- - Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal se… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41413 2026-05-8 00:46 2026-05-7 Show GitHub Exploit DB Packet Storm
146 4.2 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DRF API tokens ("wlu_… New CWE-613
 Insufficient Session Expiration
CVE-2026-41519 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
147 - - - Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial p… New CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF) 
CVE-2026-41654 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
148 4.3 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. Th… New CWE-203
 Information Exposure Through Discrepancy
CVE-2026-44263 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
149 4.3 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has… New CWE-80
Basic XSS
CVE-2026-44264 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
150 7.7 HIGH
Network
- - Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname() but passes the origina… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41688 2026-05-8 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm